summaryrefslogtreecommitdiffstats
path: root/doc/man7
diff options
context:
space:
mode:
authorTomas Mraz <tomas@openssl.org>2021-02-26 18:28:48 +0100
committerPauli <ppzgs1@gmail.com>2021-03-03 10:00:21 +1000
commit8d05a65256294f70a3bc34b7d13cc38e41a17402 (patch)
tree536216022d9298c0767b063aa8b0dda76345cbff /doc/man7
parentf378755d62e1646b36683de37408dd98549bef69 (diff)
Resolve TODOs in signature implementations.
The DER writing errors can be ignored safely. Document that the EVP_MAX_MD_SIZE is a hardcoded limit for digest sizes. Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14367)
Diffstat (limited to 'doc/man7')
-rw-r--r--doc/man7/provider-digest.pod6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/man7/provider-digest.pod b/doc/man7/provider-digest.pod
index 4f90cf8b62..a0327a85df 100644
--- a/doc/man7/provider-digest.pod
+++ b/doc/man7/provider-digest.pod
@@ -249,6 +249,12 @@ OSSL_FUNC_digest_size() should return the digest size.
OSSL_FUNC_digest_block_size() should return the block size of the underlying digest
algorithm.
+=head1 BUGS
+
+The EVP_Digest() and EVP_DigestFinal_ex() libcrypto API calls do not
+expect the digest size to be larger than EVP_MAX_MD_SIZE. Any algorithm which
+produces larger digests is unusable with those API calls.
+
=head1 SEE ALSO
L<provider(7)>, L<OSSL_PROVIDER-FIPS(7)>, L<OSSL_PROVIDER-default(7)>,