From 5264f24a5e46d748185d95bb34e74a358d1dec21 Mon Sep 17 00:00:00 2001 From: Pauli Date: Mon, 24 Feb 2025 15:20:34 +1100 Subject: [PATCH] doc: document that the FIPS provider doesn't support deterministic ECDSA sigs Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26880) (cherry picked from commit 53c54b13acdf0f0725fdd0b0eace82a723cc3647) --- doc/man7/provider-signature.pod | 2 ++ 1 file changed, 2 insertions(+) diff --git a/doc/man7/provider-signature.pod b/doc/man7/provider-signature.pod index b26b8b6a5b4..b5b8f54ab86 100644 --- a/doc/man7/provider-signature.pod +++ b/doc/man7/provider-signature.pod @@ -375,6 +375,8 @@ Section 4 "Security Considerations". The default value for nonce B as defined in FIPS 186-4 Section 6.3 "Secret Number Generation". +The FIPS provider does not support deterministic digital signature generation. + =item "kat" (B) Sets a flag to modify the sign operation to return an error if the initial -- 2.47.2