From: Sergey G. Brester Date: Wed, 27 Aug 2025 22:26:11 +0000 (+0200) Subject: openssl-enc.pod.in: We actually use PKCS#7 padding X-Git-Tag: openssl-3.6.0-beta1~20 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=43cd3773a33d88d3d53ba61eb4aebdae0f239843;p=thirdparty%2Fopenssl.git openssl-enc.pod.in: We actually use PKCS#7 padding PKCS#5 padding is a subset for 8-bytes block ciphers only. CLA: trivial Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28359) (cherry picked from commit 4e0c2d02a9a415823babf74106985352e7bbcdae) --- diff --git a/doc/man1/openssl-enc.pod.in b/doc/man1/openssl-enc.pod.in index 4d7ff3dc77e..de2ef4e691a 100644 --- a/doc/man1/openssl-enc.pod.in +++ b/doc/man1/openssl-enc.pod.in @@ -279,7 +279,7 @@ Some of the ciphers do not have large keys and others have security implications if not used correctly. A beginner is advised to just use a strong block cipher, such as AES, in CBC mode. -All the block ciphers normally use PKCS#5 padding, also known as standard +All the block ciphers normally use PKCS#7 padding, also known as standard block padding. This allows a rudimentary integrity or password check to be performed. However, since the chance of random data passing the test is better than 1 in 256 it isn't a very good test.