From db884a6790e4627be7ca48cf8c477f7d50dd3146 Mon Sep 17 00:00:00 2001
From: Paul Miller <paul@paulmillr.com>
Date: Thu, 19 Oct 2023 18:46:15 +0200
Subject: [PATCH] readme: Clarify siv

---
 README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index e7bedae..c902f38 100644
--- a/README.md
+++ b/README.md
@@ -233,7 +233,8 @@ We provide the fastest available pure JS implementation.
 
 [AES-GCM-SIV](https://en.wikipedia.org/wiki/AES-GCM-SIV)
 nonce-misuse-resistant mode is also provided. It's recommended to use it,
-to prevent catastrophic consequences of nonce reuse.
+to prevent catastrophic consequences of nonce reuse. Our implementation of SIV
+has the same speed as GCM: there is no performance hit.
 
 Check out [AES internals and block modes](#aes-internals-and-block-modes).