From: Matt Caswell <matt@openssl.org>
Date: Thu, 17 Sep 2020 13:11:21 +0000 (+0100)
Subject: Update the EdDSA docs with information about Algorithm Identifiers
X-Git-Tag: openssl-3.0.0-alpha7~190
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=28833f1465a2dd197f8df80a69095d1913e6e85e;p=thirdparty%2Fopenssl.git

Update the EdDSA docs with information about Algorithm Identifiers

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12884)
---

diff --git a/doc/man7/EVP_SIGNATURE-ED25519.pod b/doc/man7/EVP_SIGNATURE-ED25519.pod
index e3d9cd47e23..bb91ae24348 100644
--- a/doc/man7/EVP_SIGNATURE-ED25519.pod
+++ b/doc/man7/EVP_SIGNATURE-ED25519.pod
@@ -15,11 +15,24 @@ one-shot digest sign and digest verify using PureEdDSA and B<Ed25519> or B<Ed448
 (see RFC8032). It has associated private and public key formats compatible with
 RFC 8410.
 
+=head2 ED25591 and ED448 Signature Parameters
+
 No additional parameters can be set during one-shot signing or verification.
 In particular, because PureEdDSA is used, a digest must B<NOT> be specified when
 signing or verifying.
 See L<EVP_PKEY-X25519(7)> for information related to B<X25519> and B<X448> keys.
 
+The following signature parameters can be retrieved using
+EVP_PKEY_CTX_get_params().
+
+=over 4
+
+=item "algorithm-id" (B<OSSL_SIGNATURE_PARAM_ALGORITHM_ID>) <octet string>
+
+The parameters are described in L<provider-signature(7)>.
+
+=back
+
 =head1 NOTES
 
 The PureEdDSA algorithm does not support the streaming mechanism