No more AES

livingsocial · Mar 21, 2013 · b5c08f1 · b5c08f1
1 parent f7da409
commit b5c08f1
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -112,9 +112,9 @@ unable to sign new values without the writecap.
 
 All encryption of plaintext happens client-side via a command line tool which
 runs on a computer under the control of a trusted administrator. Data is
-encrypted using AES256 CBC mode prior to transmission to the server, and
-remains encrypted until accessed by another user with the read (or verify)
-capabilities.
+encrypted using NaCl's "SecretBox" primitive (i.e. XSalsa20 + Poly1305) 
+prior to transmission to the server, and remains encrypted until accessed by
+another client with the read (or verify) capabilities.
 
 Ruby Client
 -----------