X-Git-Url: https://git.distorted.org.uk/~mdw/secnet/blobdiff_plain/92cc0bca10274a3bd9cd80b729b991b885f63b31..3dc839cecdf5ea11336d51c9dbe4b7cd83b0f3f7:/secnet.8 diff --git a/secnet.8 b/secnet.8 index 9ffa605..22aea6b 100644 --- a/secnet.8 +++ b/secnet.8 @@ -453,14 +453,14 @@ Messages are padded to a multiple of this many bytes. This serves to obscure the exact length of messages. The default is 16, .TP .B capab-num -The transform capability number to use when advertising this -transform. Both ends must have the same meaning (or, at least, a -compatible transform) for each transform capability number they have +The capability number to use when advertising this +transform. Both ends must have the same meaning (or, at least, +refer to compatible constructions) for each capability number they have in common. The default for serpent-eax is 9. .IP -Transform capability numbers in the range 8..15 are intended for +Capability numbers in the range 8..15 are intended for allocation by the implementation, and may be assigned as the default -for new transforms in the future. Transform capability numbers in the +for new transforms in the future. Capability numbers in the range 0..7 are reserved for definition by the user. .PP A \fItransform closure\fR is a reversible means of transforming @@ -558,7 +558,7 @@ The key used to verify the peer's identity. One or more \fItransform closures\fR. Used to protect packets exchanged with the peer. These should all have distinct \fBcapab-num\fR values, and the same \fBcapab-num\fR -value should refer to the same (or a compatible) transform at both +value should have the same (or a compatible) meaning at both ends. The list should be in order of preference, most preferred first. (The end which sends MSG1,MSG3 ends up choosing; the ordering at the other end is irrelevant.)