lib:crypto: Comment on GKDI definitions

Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/lib/crypto/gkdi.h b/lib/crypto/gkdi.h
index a8cc6fe7d12751b0a83e174395075a2527db0faf..1c98216e147d372c6b3bc9d5a089a364474c755d 100644 (file)
--- a/lib/crypto/gkdi.h
+++ b/lib/crypto/gkdi.h
@@ -85,8 +85,8 @@ bool gkid_is_valid(const struct Gkid gkid);
 static const int gkdi_l1_key_iteration = 32;
 static const int gkdi_l2_key_iteration = 32;
 
-static const int64_t gkdi_key_cycle_duration = 360000000000;
-static const int64_t gkdi_max_clock_skew = 3000000000;
+static const int64_t gkdi_key_cycle_duration = 360000000000; /* ten hours */
+static const int64_t gkdi_max_clock_skew = 3000000000;      /* five minutes */
 
 #define GKDI_KEY_LEN 64