README | 15 +++++++-------- govpn.go | 4 ++-- handshake.go | 2 +- tap_freebsd.go | 2 +- tap_linux.go | 2 +- diff --git a/README b/README index 2852a09cd71045f15f9c9f52ee33a39a2d699c8b..f2c0d6693bd4657d4dbc047d81693fc5c5cab2c4 100644 --- a/README +++ b/README @@ -2,7 +2,7 @@ GoVPN ===== SYNOPSIS -govpn is simple high-performance secure virtual private network daemon. +govpn is simple secure virtual private network daemon. It uses DH-EKE for mutual zero-knowledge authentication and authenticated encrypted transport. It runs under GNU/Linux and FreeBSD. @@ -22,12 +22,12 @@ Because of UDP and authentication overhead: each packet grows in size during transmission, so you have to lower you maximum transmission unit (MTU) on network interface. -High security and high performance are the goals for that daemon. It -uses fast cryptography algorithms with 128bit security margin, strong -mutual zero-knowledge authentication and perfect-forward secrecy -property. An attacker can not know anything from captured traffic, even -if pre-shared key is compromised. Rehandshake is performed by client -every 4 GiB of transfered data. +High security is the goal for that daemon. It uses fast cryptography +algorithms with 128bit security margin, strong mutual zero-knowledge +authentication and perfect-forward secrecy property. An attacker can not +know anything from captured traffic, even if pre-shared key is +compromised. Rehandshake is performed by client every 4 GiB of +transfered data. Also you can provide up and down scripts that will be executed after either connection is initiated (up-script in background), or is went @@ -42,7 +42,6 @@ * Mutual two-side authentication (noone will send real network interface data unless the other side is authenticated) * Zero-knowledge authentication (pre-shared key is not transmitted in any form between the peers, not even it's hash value) -* Higher performance in some cases * Fully IPv6 compatible CONSOLE OUTPUT LEGEND diff --git a/govpn.go b/govpn.go index de54a2f5617fc2b5042e43fddedfd3297cb2f033..7b15dd429910ab039016347a8dff3966fd0fa1e9 100644 --- a/govpn.go +++ b/govpn.go @@ -1,5 +1,5 @@ /* -govpn -- high-performance secure virtual private network daemon +govpn -- simple secure virtual private network daemon Copyright (C) 2014 Sergey Matveev This program is free software: you can redistribute it and/or modify @@ -16,7 +16,7 @@ You should have received a copy of the GNU General Public License along with this program. If not, see . */ -// High-performance secure virtual private network daemon +// Simple secure virtual private network daemon package main import ( diff --git a/handshake.go b/handshake.go index 8cac69d8f8954965787a33de0c32b6a95b6e7f74..6f948b5b440178e3cda5108723a273e5ad7713b0 100644 --- a/handshake.go +++ b/handshake.go @@ -1,5 +1,5 @@ /* -govpn -- high-performance secure virtual private network daemon +govpn -- Simple secure virtual private network daemon Copyright (C) 2014 Sergey Matveev This program is free software: you can redistribute it and/or modify diff --git a/tap_freebsd.go b/tap_freebsd.go index 398e686d47f818fb3a8c0404b320429b7a48ad54..125125fb94a603a3ac0e138ca32ef45e9946f92e 100644 --- a/tap_freebsd.go +++ b/tap_freebsd.go @@ -1,7 +1,7 @@ // +build freebsd /* -govpn -- high-performance secure virtual private network daemon +govpn -- Simple secure virtual private network daemon Copyright (C) 2014 Sergey Matveev */ diff --git a/tap_linux.go b/tap_linux.go index 03a842f50dd72c748a064d2177afde0e587c256a..7a243d78143b78535fc95759e41d7ad8a0b9bb42 100644 --- a/tap_linux.go +++ b/tap_linux.go @@ -1,7 +1,7 @@ // +build linux /* -govpn -- high-performance secure virtual private network daemon +govpn -- Simple secure virtual private network daemon Copyright (C) 2014 Sergey Matveev */