readme

paulmillr · Oct 19, 2023 · dfb4355 · dfb4355
1 parent 201e67b
commit dfb4355
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -62,6 +62,7 @@ import { xchacha20poly1305 } from '@noble/ciphers/chacha';
   - [FF1 format-preserving encryption](#ff1)
   - [Managed nonces](#managed-nonces)
 - [Guidance](#guidance)
+  - [Which cipher should I pick?](#which-cipher-should-i-pick)
   - [How to encrypt properly](#how-to-encrypt-properly)
   - [Nonces](#nonces)
   - [Encryption limits](#encryption-limits)
@@ -338,6 +339,12 @@ For `decrypt`, first `nonceBytes` of ciphertext are treated as nonce.
 
 ## Guidance
 
+### Which cipher should I pick?
+
+XChaCha20-Poly1305 is the safest bet these days.
+AES-GCM-SIV is the second safest.
+AES-GCM is the third.
+
 ### How to encrypt properly
 
 - Use unpredictable key with enough entropy