Skip to content

Commit 4026752

Browse files
authored
docs: remove mentioning of Cilium's key rotation for IPSec since it does not apply to WireGuard (#3489)
1 parent 775ba22 commit 4026752

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

docs/docs/architecture/keys.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,6 @@ Each node creates its own [Curve25519](http://cr.yp.to/ecdh.html) encryption key
4242
A node uses another node's public key to decrypt and encrypt traffic from and to Cilium-managed endpoints running on that node.
4343
Connections are always encrypted peer-to-peer using [ChaCha20](http://cr.yp.to/chacha.html) with [Poly1305](http://cr.yp.to/mac.html).
4444
WireGuard implements [forward secrecy with key rotation every 2 minutes](https://lists.zx2c4.com/pipermail/wireguard/2017-December/002141.html).
45-
Cilium supports [key rotation](https://docs.cilium.io/en/stable/security/network/encryption-ipsec/#key-rotation) for the long-term node keys via Kubernetes secrets.
4645

4746
## Storage encryption
4847

0 commit comments

Comments
 (0)