diff options
| author | Matt Caswell <matt@openssl.org> | 2019-03-05 15:41:27 +0000 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2019-03-06 13:30:39 +0000 |
| commit | f7a6d1122befe9cd1d3de70cb2c19595a701b9aa (patch) | |
| tree | 0d8dd9b7e4f713f0bc189b1b3e306252d84de180 /doc | |
| parent | 9b10d1bf77b734f15c4ed5d1b619cd598b7c13fc (diff) | |
Update ChaCha20-Poly1305 documentation
Correctly describe the maximum IV length.
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8406)
(cherry picked from commit 27d5631236325c3fd8a3bd06af282ac496aac64b)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man3/EVP_EncryptInit.pod | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/man3/EVP_EncryptInit.pod b/doc/man3/EVP_EncryptInit.pod index b43a3e5468..faf7bb4c0d 100644 --- a/doc/man3/EVP_EncryptInit.pod +++ b/doc/man3/EVP_EncryptInit.pod @@ -436,7 +436,9 @@ The following I<ctrl>s are supported for the ChaCha20-Poly1305 AEAD algorithm. Sets the nonce length. This call can only be made before specifying the nonce. If not called a default nonce length of 12 (i.e. 96 bits) is used. The maximum -nonce length is 16 (B<CHACHA_CTR_SIZE>, i.e. 128-bits). +nonce length is 12 bytes (i.e. 96-bits). If a nonce of less than 12 bytes is set +then the nonce is automatically padded with leading 0 bytes to make it 12 bytes +in length. =item EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag) |