summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorslontis <shane.lontis@oracle.com>2023-02-23 09:09:57 +1000
committerPauli <pauli@openssl.org>2023-02-28 14:31:25 +1100
commitb7f3b7d8aba83c7d38db4a393bbfcb6b9c730156 (patch)
tree8ec6ff933060ac172d2d378431a3b23097767ecd /doc
parent1b9b1d5ad6acd7ebfbfcfee722f5b09a2a783697 (diff)
Document the list of RAND algorithms in the default and fips providers.
Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20361) (cherry picked from commit 7066c57dce88994778daa10ba2c81490fc5cf0c7)
Diffstat (limited to 'doc')
-rw-r--r--doc/man7/OSSL_PROVIDER-FIPS.pod16
-rw-r--r--doc/man7/OSSL_PROVIDER-default.pod16
2 files changed, 32 insertions, 0 deletions
diff --git a/doc/man7/OSSL_PROVIDER-FIPS.pod b/doc/man7/OSSL_PROVIDER-FIPS.pod
index 6aec80362d..4301db657d 100644
--- a/doc/man7/OSSL_PROVIDER-FIPS.pod
+++ b/doc/man7/OSSL_PROVIDER-FIPS.pod
@@ -172,6 +172,22 @@ The OpenSSL FIPS provider supports these operations and algorithms:
=back
+=head2 Random Number Generation
+
+=over 4
+
+=item CTR-DRBG, see L<EVP_RAND-CTR-DRBG(7)>
+
+=item HASH-DRBG, see L<EVP_RAND-HASH-DRBG(7)>
+
+=item HMAC-DRBG, see L<EVP_RAND-HMAC-DRBG(7)>
+
+=item TEST-RAND, see L<EVP_RAND-TEST-RAND(7)>
+
+TEST-RAND is an unapproved algorithm.
+
+=back
+
=head1 SELF TESTING
One of the requirements for the FIPS module is self testing. An optional callback
diff --git a/doc/man7/OSSL_PROVIDER-default.pod b/doc/man7/OSSL_PROVIDER-default.pod
index 3be5c59319..719d7e023b 100644
--- a/doc/man7/OSSL_PROVIDER-default.pod
+++ b/doc/man7/OSSL_PROVIDER-default.pod
@@ -220,6 +220,22 @@ The OpenSSL default provider supports these operations and algorithms:
=back
+=head2 Random Number Generation
+
+=over 4
+
+=item CTR-DRBG, see L<EVP_RAND-CTR-DRBG(7)>
+
+=item HASH-DRBG, see L<EVP_RAND-HASH-DRBG(7)>
+
+=item HMAC-DRBG, see L<EVP_RAND-HMAC-DRBG(7)>
+
+=item SEED-SRC, see L<EVP_RAND-SEED-SRC(7)>
+
+=item TEST-RAND, see L<EVP_RAND-TEST-RAND(7)>
+
+=back
+
=head2 Asymmetric Key Encoder
The default provider also includes all of the encoding algorithms