X-Git-Url: https://tinc-vpn.org/git/browse?a=blobdiff_plain;f=README;h=6a614112dc2311b05ea266b936688300e35e5f17;hb=cb5c1b5986861361207fa244662bb2c7f3d6a3a4;hp=ec532437a7c65ddf9a8236b35626e7239b4c66f5;hpb=85d33e563a0e4ce5910c9ba3b34eba8fbb1cbd30;p=tinc diff --git a/README b/README index ec532437..6a614112 100644 --- a/README +++ b/README @@ -51,7 +51,7 @@ In order to compile tinc, you will need a GNU C compiler environment. Please ensure you have the latest stable versions of all the required libraries: - OpenSSL (http://www.openssl.org/) version 1.0.0 or later, with support for - elliptic curve cryptography (ECC) enabeld. + elliptic curve cryptography (ECC) and Galois counter mode (GCM) enabled. The following libraries are used by default, but can be disabled if necessary: @@ -73,8 +73,8 @@ be forwarded by intermediate nodes. By default, nodes authenticate each other using 2048 bit RSA (or 521 bit ECDSA*) keys. Traffic is encrypted using Blowfish in CBC mode (or AES-256 in -CTR mode*), authenticated using HMAC-SHA1 (or HMAC-SHA-256*), and is protected -against replay attacks. +GCM mode*), authenticated using HMAC-SHA1 (or GCM*), and is protected against +replay attacks. *) When using the ExperimentalProtocol option.