From: Pauli Date: Wed, 29 Oct 2025 02:43:59 +0000 (+1100) Subject: doc: remove mention of MAC parameter to HMAC-DRBG X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f11830fa6323ea415cfa721a4b438de99383c2dd;p=thirdparty%2Fopenssl.git doc: remove mention of MAC parameter to HMAC-DRBG Reviewed-by: Dmitry Belyavskiy Reviewed-by: Shane Lontis Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/29012) --- diff --git a/doc/man3/EVP_RAND.pod b/doc/man3/EVP_RAND.pod index b9abd245cd7..19519d40086 100644 --- a/doc/man3/EVP_RAND.pod +++ b/doc/man3/EVP_RAND.pod @@ -320,13 +320,11 @@ Specifies the number of times the DRBG has been seeded or reseeded. =item "properties" (B) -=item "mac" (B) - =item "digest" (B) =item "cipher" (B) -For RAND implementations that use an underlying computation MAC, digest or +For RAND implementations that use an underlying digest or cipher, these parameters set what the algorithm should be. The value is always the name of the intended algorithm, diff --git a/doc/man7/EVP_RAND-HMAC-DRBG.pod b/doc/man7/EVP_RAND-HMAC-DRBG.pod index 4a4ce9517c3..3b1450d01cc 100644 --- a/doc/man7/EVP_RAND-HMAC-DRBG.pod +++ b/doc/man7/EVP_RAND-HMAC-DRBG.pod @@ -46,8 +46,6 @@ The supported parameters are: =item "properties" (B) -=item "mac" (B) - =item "digest" (B) These parameters work as described in L. @@ -95,14 +93,13 @@ A context for HMAC DRBG can be obtained by calling: EVP_RAND *rand; EVP_RAND_CTX *rctx; unsigned char bytes[100]; - OSSL_PARAM params[3], *p = params; + OSSL_PARAM params[2], *p = params; unsigned int strength = 128; rand = EVP_RAND_fetch(NULL, "HMAC-DRBG", NULL); rctx = EVP_RAND_CTX_new(rand, NULL); EVP_RAND_free(rand); - *p++ = OSSL_PARAM_construct_utf8_string(OSSL_DRBG_PARAM_MAC, SN_hmac, 0); *p++ = OSSL_PARAM_construct_utf8_string(OSSL_DRBG_PARAM_DIGEST, SN_sha256, 0); *p = OSSL_PARAM_construct_end(); EVP_RAND_instantiate(rctx, strength, 0, NULL, 0, params); diff --git a/doc/man7/provider-rand.pod b/doc/man7/provider-rand.pod index 5fd38f6b40c..f6e7891d502 100644 --- a/doc/man7/provider-rand.pod +++ b/doc/man7/provider-rand.pod @@ -249,9 +249,7 @@ Specifies the number of times the DRBG has been seeded or reseeded. =item "cipher" (B) -=item "mac" (B) - -Sets the name of the underlying cipher, digest or MAC to be used. +Sets the name of the underlying cipher or digest to be used. It must name a suitable algorithm for the DRBG that's being used. =item "properties" (B)