From: Pauli Date: Fri, 13 Sep 2019 09:35:37 +0000 (+1000) Subject: Use param types for parameter descriptions. Mention a size_t limit to those where... X-Git-Tag: openssl-3.0.0-alpha1~1356 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f4651268b42dc5d7ccf29922d06b65e62d0ab2a1;p=thirdparty%2Fopenssl.git Use param types for parameter descriptions. Mention a size_t limit to those where it makes sense. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/9891) --- diff --git a/doc/man3/EVP_KDF.pod b/doc/man3/EVP_KDF.pod index 2069e7f0ee0..2770c9534f9 100644 --- a/doc/man3/EVP_KDF.pod +++ b/doc/man3/EVP_KDF.pod @@ -156,7 +156,7 @@ For those KDF implementations that support it, this parameter sets the salt. The default value, if any, is implementation dependent. -=item B ("iter") +=item B ("iter") Some KDF implementations require an iteration count. For those KDF implementations that support it, this parameter sets the @@ -170,7 +170,7 @@ The default value, if any, is implementation dependent. =item B ("digest") -=item B ("engine") +=item B ("engine") For KDF implementations that use an underlying computation MAC or digest, these parameters set what the algorithm should be, and the @@ -189,15 +189,16 @@ Some KDF implementations require a key. For those KDF implementations that support it, this octet string parameter sets the key. -=item B ("maclen") +=item B ("maclen") Used by implementations that use a MAC with a variable output size (KMAC). For those KDF implementations that support it, this parameter sets the MAC output size. The default value, if any, is implementation dependent. +The length must never exceed what can be given with a B. -=item B ("macmaxmem_byteslen") +=item B ("macmaxmem_byteslen") Memory-hard password-based KDF algorithms, such as scrypt, use an amount of memory that depends on the load factors provided as input. @@ -208,6 +209,7 @@ If this memory usage limit is exceeded because the load factors are chosen too high, the key derivation will fail. The default value is implementation dependent. +The memory size must never exceed what can be given with a B. =back