From: Pauli Date: Mon, 5 Aug 2024 05:48:47 +0000 (+1000) Subject: doc: document kbkdf key check argument for fipsinstall X-Git-Tag: openssl-3.4.0-alpha1~186 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8d52cf525b91668bb9eb7bac0331f455899fc7c2;p=thirdparty%2Fopenssl.git doc: document kbkdf key check argument for fipsinstall Reviewed-by: Tomas Mraz Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/25095) --- diff --git a/doc/man1/openssl-fipsinstall.pod.in b/doc/man1/openssl-fipsinstall.pod.in index e8c79f19d08..f61d9839923 100644 --- a/doc/man1/openssl-fipsinstall.pod.in +++ b/doc/man1/openssl-fipsinstall.pod.in @@ -38,6 +38,7 @@ B [B<-rsa_pkcs15_padding_disabled>] [B<-rsa_sign_x931_disabled>] [B<-hkdf_key_check>] +[B<-kbkdf_key_check>] [B<-tls13_kdf_key_check>] [B<-tls1_prf_key_check>] [B<-sshkdf_key_check>] @@ -284,6 +285,12 @@ Configure the module to enable a run-time short key-derivation key check when deriving a key by HKDF. See NIST SP 800-131Ar2 for details. +=item B<-kbkdf_key_check> + +Configure the module to enable a run-time short key-derivation key check when +deriving a key by KBKDF. +See NIST SP 800-131Ar2 for details. + =item B<-tls13_kdf_key_check> Configure the module to enable a run-time short key-derivation key check when