From: Clemens Lang Date: Wed, 28 Aug 2024 15:18:03 +0000 (+0200) Subject: doc: Document properties param for Argon2 KDF X-Git-Tag: openssl-3.3.2~10 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=589286efca5ab637ae29ef7f3522dc85ee080d55;p=thirdparty%2Fopenssl.git doc: Document properties param for Argon2 KDF The Argon2 KDF uses OSSL_KDF_PARAM_PROPERTIES to fetch implementations of blake2bmac and blake2b512 if ctx->mac and ctx->md are NULL. This isn't documented in the manpage, so users that might, for example, want to fetch an instance of Argon2 with the -fips property query to obtain a working Argon2 KDF even though the default property query requires fips=yes are left wondering why this fails. Fortunately, EVP_KDF(3)/PARAMETERS already explains what the properties are used for, so we really just need to add a single line. Signed-off-by: Clemens Lang Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25306) (cherry picked from commit 6772c2ab1bc5f12dd800247cd6800c45c2c0bf6e) --- diff --git a/doc/man7/EVP_KDF-ARGON2.pod b/doc/man7/EVP_KDF-ARGON2.pod index d41a3179b53..ecbd3ad7458 100644 --- a/doc/man7/EVP_KDF-ARGON2.pod +++ b/doc/man7/EVP_KDF-ARGON2.pod @@ -44,6 +44,8 @@ The supported parameters are: =item "size" (B) +=item "properties" (B) + These parameters work as described in L. Note that RFC 9106 recommends 128 bits salt for most applications, or 64 bits