From: Guus Sliepen <guus@tinc-vpn.org>
Date: Mon, 20 Jan 2014 19:21:15 +0000 (+0100)
Subject: Document that 1.1 uses AES-256 in GCM mode.
X-Git-Tag: release-1.1pre10~13
X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=commitdiff_plain;h=e187758a7e163cb2d2e57db8b093823f68f1491f

Document that 1.1 uses AES-256 in GCM mode.
---

diff --git a/README b/README
index ec532437..e67d401c 100644
--- a/README
+++ b/README
@@ -73,8 +73,8 @@ be forwarded by intermediate nodes.
 
 By default, nodes authenticate each other using 2048 bit RSA (or 521 bit
 ECDSA*) keys. Traffic is encrypted using Blowfish in CBC mode (or AES-256 in
-CTR mode*), authenticated using HMAC-SHA1 (or HMAC-SHA-256*), and is protected
-against replay attacks.
+GCM mode*), authenticated using HMAC-SHA1 (or GCM*), and is protected against
+replay attacks.
 
 *) When using the ExperimentalProtocol option.