From f2b7a00fbb372b0ea32f2cfea865ab407641b1fa Mon Sep 17 00:00:00 2001
From: Alessandro Chitarrini <alessandro.chitarrini51@gmail.com>
Date: Thu, 29 Aug 2024 12:59:54 +0200
Subject: [PATCH] Fix inaccurate comment about default nonce length in
 demos/cipher/aesccm.c

Fixes #25270

CLA: trivial

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25318)
---
 demos/cipher/aesccm.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demos/cipher/aesccm.c b/demos/cipher/aesccm.c
index 7aec82b893f..55d2b5fe6d2 100644
--- a/demos/cipher/aesccm.c
+++ b/demos/cipher/aesccm.c
@@ -94,7 +94,7 @@ static int aes_ccm_encrypt(void)
     if ((cipher = EVP_CIPHER_fetch(libctx, "AES-192-CCM", propq)) == NULL)
         goto err;
 
-    /* Set nonce length if default 96 bits is not appropriate */
+    /* Default nonce length for AES-CCM is 7 bytes (56 bits). */
     params[0] = OSSL_PARAM_construct_size_t(OSSL_CIPHER_PARAM_AEAD_IVLEN,
                                             &ccm_nonce_len);
     /* Set tag length */
-- 
2.47.2