readme

Author: paulmillr

README.md

@@ -128,8 +128,8 @@ For `encrypt`, a `nonceBytes`-length buffer is fetched from CSPRNG and prenended
 For `decrypt`, first `nonceBytes` of ciphertext are treated as nonce.
 
 > [!WARNING]
-> AES-GCM & ChaCha (NOT xchacha) have 12-byte nonces, which limit amount of messages
-> encryptable under the same key. Check out [limits section](#encryption-limits).
+> AES-GCM & ChaCha (NOT XChaCha) [limit amount](#encryption-limits) of messages
+> encryptable under the same key.
 
 ```js
 import { xchacha20poly1305 } from '@noble/ciphers/chacha';