From: slontis <shane.lontis@oracle.com>
Date: Mon, 7 Jul 2025 07:04:09 +0000 (+1000)
Subject: DOC: Fixup FIPS provider documentation.
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=07675d28de7928b159906a6292edba74010edb21;p=thirdparty%2Fopenssl.git

DOC: Fixup FIPS provider documentation.

SHAKE3 was missing from the list.
Also clarified that KECCAK-KMAC is internal.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/27885)
---

diff --git a/doc/man7/OSSL_PROVIDER-FIPS.pod b/doc/man7/OSSL_PROVIDER-FIPS.pod
index f2cd3338468..b38a6697a7e 100644
--- a/doc/man7/OSSL_PROVIDER-FIPS.pod
+++ b/doc/man7/OSSL_PROVIDER-FIPS.pod
@@ -67,8 +67,12 @@ The OpenSSL FIPS provider supports these operations and algorithms:
 
 =item SHA3, see L<EVP_MD-SHA3(7)>
 
+=item SHAKE, see L<EVP_MD-SHAKE(7)>
+
 =item KECCAK-KMAC, see L<EVP_MD-KECCAK-KMAC(7)>
 
+KECCAK-KMAC is only used internally as a sub algorithm of KMAC.
+
 =back
 
 =head2 Symmetric Ciphers