@node Identity
-@section Identity
+@subsection Identity
Client's identity is 128-bit string. It is not secret, so can be
transmitted and stored in the clear. However handshake applies PRP on it
to make DPI and deanonymization much harder to success. It is used as a
-salt in verifier.
+salt in @ref{Verifier}.