From eab0d191269e71af67bf9bb67e5b25999801356f Mon Sep 17 00:00:00 2001 From: Terry Chia Date: Thu, 26 Mar 2015 08:56:28 +0800 Subject: Attempt to explain MultiFernet better. --- docs/fernet.rst | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/fernet.rst b/docs/fernet.rst index f1a4c748..6ca20db9 100644 --- a/docs/fernet.rst +++ b/docs/fernet.rst @@ -92,8 +92,10 @@ has support for implementing key rotation via :class:`MultiFernet`. >>> f.decrypt(token) 'Secret message!' - Fernet performs all encryption options using the *first* key in the - ``list`` provided. Decryption supports using *any* of constituent keys. + MultiFernet performs all encryption options using the *first* key in the + ``list`` provided. MultiFernet attempts to decrypt tokens with each key in + turn . A :class:`cryptography.fernet.InvalidToken` exception is raised if + the correct key is not found in the ``list`` provided. Key rotation makes it easy to replace old keys. You can add your new key at the front of the list to start encrypting new messages, and remove old keys -- cgit v1.2.3