From a358acab0b1a589cebc45846ab54f7fa751c4820 Mon Sep 17 00:00:00 2001 From: Duke Date: Fri, 5 Jan 2024 13:02:36 -0800 Subject: [PATCH] More info about ciphersuites --- doc/overview.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/overview.md b/doc/overview.md index 531f17294..7468a2622 100644 --- a/doc/overview.md +++ b/doc/overview.md @@ -17,8 +17,9 @@ Equihash (200,9) (ASIC) TLS1.3 via WolfSSL is enforced for all network connections as of v3.6.1 . Many ciphersuites are technically supported by TLS1.3 but many of them are ancient, proved to be less secure than intended or likely backdoored. +Hush only uses what are widely considered to be the most secure and [best ciphersuites](https://ciphersuite.info/cs/). -Hush P2P connections are randomly choosen between these two ciphersuites each +New Hush P2P connections randomly choose between these two ciphersuites each time a new connection to a peer is created: * `TLS_AES_256_GCM_SHA384`