crypto.h: improved documentation of randomness levels

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

diff --git a/lib/includes/gnutls/crypto.h b/lib/includes/gnutls/crypto.h
index 7cd92a2000c9d1a4dac6dede08f56e50e0faf25c..9ecb1f2b9125bcb97200e2fd87e371f8196de5a9 100644 (file)
--- a/lib/includes/gnutls/crypto.h
+++ b/lib/includes/gnutls/crypto.h
@@ -120,8 +120,9 @@ int gnutls_hash_fast(gnutls_digest_algorithm_t algorithm,
  * @GNUTLS_RND_NONCE: Non-predictable random number.  Fatal in parts
  *   of session if broken, i.e., vulnerable to statistical analysis.
  * @GNUTLS_RND_RANDOM: Pseudo-random cryptographic random number.
- *   Fatal in session if broken.
- * @GNUTLS_RND_KEY: Fatal in many sessions if broken.
+ *   Fatal in session if broken. Example use: temporal keys.
+ * @GNUTLS_RND_KEY: Fatal in many sessions if broken. Example use:
+ *   Long-term keys.
  *
  * Enumeration of random quality levels.
  */