From: Matt Hauck Date: Fri, 15 Mar 2024 01:25:11 +0000 (-0700) Subject: Update FIPS hmac key documentation X-Git-Tag: openssl-3.1.6~85 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=41c4c279b09fc9cec860bb00e65da7c8e090aca1;p=thirdparty%2Fopenssl.git Update FIPS hmac key documentation The documentation is slightly incorrect about the FIPS hmac key. CLA: trivial Reviewed-by: Shane Lontis Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/23846) (cherry picked from commit 53ef123f48d402aff7c27f8ec15191cb1cde4105) --- diff --git a/INSTALL.md b/INSTALL.md index 95842c4641e..cd2bfe4031f 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -481,7 +481,7 @@ Setting the FIPS HMAC key As part of its self-test validation, the FIPS module must verify itself by performing a SHA-256 HMAC computation on itself. The default key is -the SHA256 value of "the holy handgrenade of antioch" and is sufficient +the SHA256 value of "holy hand grenade of antioch" and is sufficient for meeting the FIPS requirements. To change the key to a different value, use this flag. The value should