diff options
| author | Jonathan <jonathan@mullvad.net> | 2023-02-27 22:58:26 +0100 |
|---|---|---|
| committer | David Lönnhager <david.l@mullvad.net> | 2023-02-28 10:07:53 +0100 |
| commit | 8eb6c3dd395ed7a451908cee5a4708066ed0b029 (patch) | |
| tree | a81f034861f02fb0c4eb5dc11b3065c1d652851f /docs | |
| parent | a56982b262aa88d1ee6d87f6857556f9a602a5b9 (diff) | |
| download | mullvadvpn-8eb6c3dd395ed7a451908cee5a4708066ed0b029.tar.xz mullvadvpn-8eb6c3dd395ed7a451908cee5a4708066ed0b029.zip | |
Update docs based on review comments
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/architecture.md | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/docs/architecture.md b/docs/architecture.md index 6fbde3d519..4837758a45 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -197,10 +197,11 @@ metadata that might be useful. To establish a quantum-resistant tunnel, a pre-shared key (PSK) is derived using a quantum-safe key encapsulation mechanism (KEM) with the relay. This is achieved by initiating a regular WireGuard tunnel to the relay and deriving the PSK within the tunnel. -The PSK is saved on the relay and the client, along with a new client generated ephemeral WireGuard -key. Subsequently, a new tunnel is created using the new WireGuard key and the PSK, ensuring that -the tunnel is quantum-resistant. -See [this](../talpid-tunnel-config-client/proto/tunnel_config.proto) for more details on the protocol. +The PSK is stored in memory on the relay and the client, along with a new client generated ephemeral +WireGuard key. Subsequently, a new tunnel is created using the new WireGuard key and the PSK, +ensuring that the tunnel is quantum-resistant. +See the [protocol definition file](../talpid-tunnel-config-client/proto/tunnel_config.proto) for +more details on the protocol. #### Quantum-resistant tunnels & Multihop |