X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fprecautions.texi;h=20570b00aa528147d1c9eb783afd97c81d0577ac;hb=fa2fbe9b374fe5ac0949291e11b2a6bc5b4b53cd;hp=f69d5341a04797b740d528ab4fab6ba481d9449f;hpb=23594738bb8908bc6b487c6a831509206ba18a91;p=govpn.git diff --git a/doc/precautions.texi b/doc/precautions.texi index f69d534..20570b0 100644 --- a/doc/precautions.texi +++ b/doc/precautions.texi @@ -3,20 +3,18 @@ @enumerate @item -We use password (passphrase) authentication, so overall security fully -depends on its strength. So you should use long, high-entropy -passphrases. Also remember to keep passphrase on temporary file and read -it securely as described in @ref{Verifier}. +We use passphrase authentication, so overall security fully depends on +its strength. You @strong{should} use long, high-entropy passphrases. +Also remember to keep passphrase in temporary file and read it securely +as described in @ref{Verifier, verifier}. @item -You must @strong{never} use one key for multiple clients. -If so, then all security is ruined and transmitted data can -be decrypted. +You must @strong{never} use the same key for multiple clients. @item You must use @strong{cryptographically good} pseudo random number generator. By default we use default @code{crypto/rand} library that -reads @code{/dev/urandom} source. Some GNU/Linux and FreeBSD systems +reads @file{/dev/urandom} source. Some GNU/Linux and FreeBSD systems are rather good with this entropy source. Closed proprietary ones are always not and you must use optional @ref{EGD} feature with them. @end enumerate