diff --git a/doc/design/encryption.mdwn b/doc/design/encryption.mdwn
index 90b722b9b8..915eee1a13 100644
--- a/doc/design/encryption.mdwn
+++ b/doc/design/encryption.mdwn
@@ -39,7 +39,7 @@ At a high level, an encryption backend needs to support these operations:
   a stream to an action that consumes the encrypted content.
 
 * Given a streaming source of encrypted content, decrypt it, and send
-  it in a stream to an anction that consumes the decrypted content.
+  it in a stream to an action that consumes the decrypted content.
 
 * Clean up.