You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/reference/architecture/encryption-algorithms.md
+13-8Lines changed: 13 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,14 +16,19 @@ cryptographic algorithms for optimal security and performance.
16
16
17
17
-### Symmetric Encryption
18
18
19
-
-**XChaCha20-Poly1305 (IETF)**
20
-
-**Key Size:** 256 bits
21
-
-**Nonce Size:** 192 bits
22
-
-**MAC Size:** 128 bits
23
-
- This extended 192-bit nonce allows random nonces to be safely used, reducing the risk of nonce reuse and making the encryption scheme misuse-resistant.
24
-
- A stream cipher approach is employed, encrypting data per block with a fresh, random nonce each time.
25
-
- Polykey stores its persistent state in an encrypted database, protected by a “Data Encryption Key” (DEK). This DEK is not derived from the root key, so rotating the root key does not require re-encrypting the entire database.
26
-
- By combining encryption and authentication, XChaCha20-Poly1305 ensures both confidentiality and integrity of the stored data.
19
+
-**XChaCha20-Poly1305 (IETF)**
20
+
-**Key Size:** 256 bits
21
+
-**Nonce Size:** 192 bits
22
+
-**MAC Size:** 128 bits
23
+
- This extended 192-bit nonce allows random nonces to be safely used, reducing
24
+
the risk of nonce reuse and making the encryption scheme misuse-resistant.
25
+
- A stream cipher approach is employed, encrypting data per block with a
26
+
fresh, random nonce each time.
27
+
- Polykey stores its persistent state in an encrypted database, protected by a
28
+
“Data Encryption Key” (DEK). This DEK is not derived from the root key, so
29
+
rotating the root key does not require re-encrypting the entire database.
30
+
- By combining encryption and authentication, XChaCha20-Poly1305 ensures both
0 commit comments