From 8d52cf525b91668bb9eb7bac0331f455899fc7c2 Mon Sep 17 00:00:00 2001 From: Pauli Date: Mon, 5 Aug 2024 15:48:47 +1000 Subject: [PATCH] doc: document kbkdf key check argument for fipsinstall Reviewed-by: Tomas Mraz Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/25095) --- doc/man1/openssl-fipsinstall.pod.in | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/doc/man1/openssl-fipsinstall.pod.in b/doc/man1/openssl-fipsinstall.pod.in index e8c79f19d08..f61d9839923 100644 --- a/doc/man1/openssl-fipsinstall.pod.in +++ b/doc/man1/openssl-fipsinstall.pod.in @@ -38,6 +38,7 @@ B [B<-rsa_pkcs15_padding_disabled>] [B<-rsa_sign_x931_disabled>] [B<-hkdf_key_check>] +[B<-kbkdf_key_check>] [B<-tls13_kdf_key_check>] [B<-tls1_prf_key_check>] [B<-sshkdf_key_check>] @@ -284,6 +285,12 @@ Configure the module to enable a run-time short key-derivation key check when deriving a key by HKDF. See NIST SP 800-131Ar2 for details. +=item B<-kbkdf_key_check> + +Configure the module to enable a run-time short key-derivation key check when +deriving a key by KBKDF. +See NIST SP 800-131Ar2 for details. + =item B<-tls13_kdf_key_check> Configure the module to enable a run-time short key-derivation key check when -- 2.47.2