diff --git a/site/encryption/crypto-overview.md b/site/encryption/crypto-overview.md index 4ff4d0e0..ede8e447 100644 --- a/site/encryption/crypto-overview.md +++ b/site/encryption/crypto-overview.md @@ -4,13 +4,15 @@ layout: default --- +Weave Net peers +[communicate with each other over both TCP and UDP](/site/router-topology/overview.md). This +communication +[can be encrypted](/site/using-weave/security-untrusted-networks.md). -Weave Net can be configured to encrypt both the data passing over the TCP -connections and the payloads of UDP packets sent between peers. This -is accomplished using the [NaCl](http://nacl.cr.yp.to/) crypto -libraries, employing Curve25519, XSalsa20 and Poly1305 to encrypt and -authenticate messages. Weave Net protects against injection and replay -attacks for traffic forwarded between peers. +Encryption is accomplished using the [NaCl](http://nacl.cr.yp.to/) +crypto libraries, employing Curve25519, XSalsa20 and Poly1305 to +encrypt and authenticate messages. Weave Net protects against +injection and replay attacks for traffic forwarded between peers. NaCl was selected because of its good reputation both in terms of selection and implementation of ciphers, but equally importantly, its @@ -33,4 +35,4 @@ deployed. **See Also** * [How Weave Implements Encryption](/site/encryption/implementation.md) - * [Securing Containers Across Untrusted Networks](/site/using-weave/security-untrusted-networks.md) \ No newline at end of file + * [Securing Containers Across Untrusted Networks](/site/using-weave/security-untrusted-networks.md)