From d387ba039e99d07a50b3d7ffffc7e8a2e1abd938 Mon Sep 17 00:00:00 2001 From: ng0 Date: Thu, 23 Nov 2017 16:09:31 +0000 Subject: definitions. --- doc/documentation/chapters/philosophy.texi | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) (limited to 'doc') diff --git a/doc/documentation/chapters/philosophy.texi b/doc/documentation/chapters/philosophy.texi index e5c63339e..116991a6a 100644 --- a/doc/documentation/chapters/philosophy.texi +++ b/doc/documentation/chapters/philosophy.texi @@ -161,15 +161,12 @@ signed using ECDSA (@uref{http://en.wikipedia.org/wiki/ECDSA, ECDSA}). The shared secret from ECDHE is used to create a pair of session keys @c FIXME: LOng word for HKDF (using HKDF) which are then used to encrypt the communication between the -@c FIXME: AES -two peers using both 256-bit AES -@c FIXME: Twofish +two peers using both 256-bit AES (Advanced Encryption Standard) and 256-bit Twofish (with independently derived secret keys). As only the two participating hosts know the shared secret, this authenticates each packet -@c FIXME SHA. -without requiring signatures each time. GNUnet uses SHA-512 hash codes to -verify the integrity of messages. +without requiring signatures each time. GNUnet uses SHA-512 +(Secure Hash Algorithm) hash codes to verify the integrity of messages. In GNUnet, the identity of a host is its public key. For that reason, @c FIXME: is it clear to the average reader what a man-in-the-middle -- cgit v1.2.3