doc: document kbkdf key check argument for fipsinstall

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/25095)

diff --git a/doc/man1/openssl-fipsinstall.pod.in b/doc/man1/openssl-fipsinstall.pod.in
index e8c79f19d08681b4aa5a2ddcb4d858c463b48a79..f61d98399234573fe7dbbcd4c547cad3193d7312 100644 (file)
--- a/doc/man1/openssl-fipsinstall.pod.in
+++ b/doc/man1/openssl-fipsinstall.pod.in
@@ -38,6 +38,7 @@ B<openssl fipsinstall>
 [B<-rsa_pkcs15_padding_disabled>]
 [B<-rsa_sign_x931_disabled>]
 [B<-hkdf_key_check>]
+[B<-kbkdf_key_check>]
 [B<-tls13_kdf_key_check>]
 [B<-tls1_prf_key_check>]
 [B<-sshkdf_key_check>]
@@ -284,6 +285,12 @@ Configure the module to enable a run-time short key-derivation key check when
 deriving a key by HKDF.
 See NIST SP 800-131Ar2 for details.
 
+=item B<-kbkdf_key_check>
+
+Configure the module to enable a run-time short key-derivation key check when
+deriving a key by KBKDF.
+See NIST SP 800-131Ar2 for details.
+
 =item B<-tls13_kdf_key_check>
 
 Configure the module to enable a run-time short key-derivation key check when