X-Git-Url: http://www.git.cypherpunks.ru/?p=govpn.git;a=blobdiff_plain;f=doc%2Fencless.texi;h=9513d6ce67f5bd8b473b0a0cb44cabd478e3666f;hp=6d44191ebdc1c5d492ffc321568e146f8d2acada;hb=0bf04621961589bc735dc8bd8a075d7db24c4178;hpb=9addeabf74df4ef01e4a10c9f960b362172524e8 diff --git a/doc/encless.texi b/doc/encless.texi index 6d44191..9513d6c 100644 --- a/doc/encless.texi +++ b/doc/encless.texi @@ -8,7 +8,7 @@ some countries forbids usage of encryption (but again not the authentication). GoVPN provides special encryptionless mode of operation. In this mode it -replaces Salsa20 function used for confidentiality with rather +replaces ChaCha20 function used for confidentiality with rather well-known @url{http://people.csail.mit.edu/rivest/chaffing-980701.txt, Chaffing-and-Winnowing} (CnW) technology. This is rather traffic and resource hungry algorithm, so we use it after @@ -25,12 +25,5 @@ signature algorithms. No encryption and steganography involved. In this mode each outgoing packet became larger on 4128 bytes and @ref{Noise, noise} is forcefully enabled. So this is resource hungry mode! -@strong{Beware}: by default packet serial numbers are still processed -through the XTEA encryption. It is not required for confidentiality and -security, but for randomizing some parts of the traffic to make it -indistinguishable from the noise, for making it more DPI-proof. It -safely can be disabled, turned off or maybe its keys even can be -revealed without security and forward secrecy loss. - See @code{govpn/cnw} and @code{govpn/aont} packages for details of AONT and chaffing operations.