X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=doc%2Fprecautions.texi;h=93b179e427f6829246d6a45e4b70bb0cb0f8068e;hb=cae1bf7a68f5be04942cdb96f91e5eca44232f5c;hp=bae37b3ec4e5d02e167d8488264aed1f468c6dd6;hpb=1f0e56f6a94ab99ef3b46eb1b07f65c802f508c0;p=govpn.git diff --git a/doc/precautions.texi b/doc/precautions.texi index bae37b3..93b179e 100644 --- a/doc/precautions.texi +++ b/doc/precautions.texi @@ -17,3 +17,8 @@ Also you should @strong{never} use one key for multiple clients. Salsa20 encryption is randomized in each session, but it depends again on PRNG. If it fails, produces equal values at least once, then all you traffic related to that key could be decrypted. + +We use password (passphrase) authentication, so overall security fully +depends on it's strength. So you should use long, high-entropy +passphrases. Also remember to keep passphrase on temporary file as +described in @ref{Verifier}.