diff options
Diffstat (limited to 'doc/man7')
-rw-r--r-- | doc/man7/EVP_PKEY-EC.pod | 6 | ||||
-rw-r--r-- | doc/man7/crypto.pod | 2 | ||||
-rw-r--r-- | doc/man7/fips_module.pod | 2 | ||||
-rw-r--r-- | doc/man7/life_cycle-pkey.pod | 4 | ||||
-rw-r--r-- | doc/man7/migration_guide.pod | 10 | ||||
-rw-r--r-- | doc/man7/openssl-glossary.pod | 6 | ||||
-rw-r--r-- | doc/man7/provider-kdf.pod | 2 | ||||
-rw-r--r-- | doc/man7/provider-object.pod | 2 |
8 files changed, 17 insertions, 17 deletions
diff --git a/doc/man7/EVP_PKEY-EC.pod b/doc/man7/EVP_PKEY-EC.pod index d9b1666b2e..d4c8d9e36e 100644 --- a/doc/man7/EVP_PKEY-EC.pod +++ b/doc/man7/EVP_PKEY-EC.pod @@ -15,7 +15,7 @@ The B<EC> keytype is implemented in OpenSSL's default provider. The normal way of specifying domain parameters for an EC curve is via the curve name "group". For curves with no curve name, explicit parameters can be used that specify "field-type", "p", "a", "b", "generator" and "order". -Explicit parameters are supported for backwards compability reasons, but they +Explicit parameters are supported for backwards compatibility reasons, but they are not compliant with multiple standards (including RFC5915) which only allow named curves. @@ -70,7 +70,7 @@ I<order> multiplied by the I<cofactor> gives the number of points on the curve. =item "decoded-from-explicit" (B<OSSL_PKEY_PARAM_EC_DECODED_FROM_EXPLICIT_PARAMS>) <integer> -Gets a flag indicating wether the key or parameters were decoded from explicit +Gets a flag indicating whether the key or parameters were decoded from explicit curve parameters. Set to 1 if so or 0 if a named curve was used. =item "use-cofactor-flag" (B<OSSL_PKEY_PARAM_USE_COFACTOR_ECDH>) <integer> @@ -95,7 +95,7 @@ point_conversion_forms please see L<EC_POINT_new(3)>. Valid values are Sets or Gets the type of group check done when EVP_PKEY_param_check() is called. Valid values are "default", "named" and "named-nist". The "named" type checks that the domain parameters match the inbuilt curve parameters, -"named-nist" is similiar but also checks that the named curve is a nist curve. +"named-nist" is similar but also checks that the named curve is a nist curve. The "default" type does domain parameter validation for the OpenSSL default provider, but is equivalent to "named-nist" for the OpenSSL FIPS provider. diff --git a/doc/man7/crypto.pod b/doc/man7/crypto.pod index d6c80fbf75..e114fb226e 100644 --- a/doc/man7/crypto.pod +++ b/doc/man7/crypto.pod @@ -206,7 +206,7 @@ If anything in this step fails, the next step is used as a fallback. As a fallback, try to fetch the operation type implementation from the same provider as the original L<EVP_PKEY(3)>'s L<EVP_KEYMGMT(3)>, still using the -propery string from the B<EVP_PKEY_CTX>. +property string from the B<EVP_PKEY_CTX>. =back diff --git a/doc/man7/fips_module.pod b/doc/man7/fips_module.pod index 3736aa1dae..36b9107b89 100644 --- a/doc/man7/fips_module.pod +++ b/doc/man7/fips_module.pod @@ -92,7 +92,7 @@ Obviously the include file location above should match the path and name of the FIPS module config file that you installed earlier. See L<https://github.com/openssl/openssl/blob/master/README-FIPS.md>. -For FIPS usage, it is recommened that the B<config_diagnostics> option is +For FIPS usage, it is recommended that the B<config_diagnostics> option is enabled to prevent accidental use of non-FIPS validated algorithms via broken or mistaken configuration. See L<config(5)>. diff --git a/doc/man7/life_cycle-pkey.pod b/doc/man7/life_cycle-pkey.pod index 6768750f48..0300203551 100644 --- a/doc/man7/life_cycle-pkey.pod +++ b/doc/man7/life_cycle-pkey.pod @@ -22,7 +22,7 @@ This state represents the PKEY after it has been allocated. =item decapsulate This state represents the PKEY when it is ready to perform a private key decapsulation -opeartion. +operation. =item decrypt @@ -40,7 +40,7 @@ operation. =item encapsulate This state represents the PKEY when it is ready to perform a public key encapsulation -opeartion. +operation. =item encrypt diff --git a/doc/man7/migration_guide.pod b/doc/man7/migration_guide.pod index c2d885d492..bdbecf1528 100644 --- a/doc/man7/migration_guide.pod +++ b/doc/man7/migration_guide.pod @@ -130,7 +130,7 @@ New algorithms provided via engines will still work. Engine-backed keys can be loaded via custom B<OSSL_STORE> implementation. In this case the B<EVP_PKEY> objects created via L<ENGINE_load_private_key(3)> -will be concidered legacy and will continue to work. +will be considered legacy and will continue to work. To ensure the future compatibility, the engines should be turned to providers. To prefer the provider-based hardware offload, you can specify the default @@ -624,7 +624,7 @@ set up with the default library context. Use L<X509_new_ex(3)>, L<X509_CRL_new_ex(3)>, L<X509_REQ_new_ex(3)> and L<X509_PUBKEY_new_ex(3)> if a library context is required. -All functions listed below with a I<NAME> have a replacment function I<NAME_ex> +All functions listed below with a I<NAME> have a replacement function I<NAME_ex> that takes B<OSSL_LIB_CTX> as an additional argument. Functions that have other mappings are listed along with the respective name. @@ -982,7 +982,7 @@ that refer to these categories. Any accessor that uses an ENGINE is deprecated (such as EVP_PKEY_set1_engine()). Applications using engines should instead use providers. -Before providers were added algorithms were overriden by changing the methods +Before providers were added algorithms were overridden by changing the methods used by algorithms. All these methods such as RSA_new_method() and RSA_meth_new() are now deprecated and can be replaced by using providers instead. @@ -1074,7 +1074,7 @@ See L<EVP_MAC(3)>, L<EVP_MAC-HMAC(7)>, L<EVP_MAC-CMAC(7)>, L<EVP_MAC-GMAC(7)>, L<EVP_MAC-KMAC(7)>, L<EVP_MAC-BLAKE2(7)>, L<EVP_MAC-Poly1305(7)> and L<EVP_MAC-Siphash(7)> for additional information. -Note that the one-shot method HMAC() is still available for compatability purposes. +Note that the one-shot method HMAC() is still available for compatibility purposes. =head4 Deprecated low-level validation functions @@ -1530,7 +1530,7 @@ See L</Deprecated low-level validation functions> EC_KEY_set_flags(), EC_KEY_get_flags(), EC_KEY_clear_flags() -See L<EVP_PKEY-EC(7)/Common EC parameters> which handles flags as seperate +See L<EVP_PKEY-EC(7)/Common EC parameters> which handles flags as separate parameters for B<OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT>, B<OSSL_PKEY_PARAM_EC_GROUP_CHECK_TYPE>, B<OSSL_PKEY_PARAM_EC_ENCODING>, B<OSSL_PKEY_PARAM_USE_COFACTOR_ECDH> and diff --git a/doc/man7/openssl-glossary.pod b/doc/man7/openssl-glossary.pod index b112b375ac..5d6a830429 100644 --- a/doc/man7/openssl-glossary.pod +++ b/doc/man7/openssl-glossary.pod @@ -12,7 +12,7 @@ openssl-glossary - An OpenSSL Glossary =item Algorithm -Cryptograpic primitives such as the SHA256 digest, or AES encryption are +Cryptographic primitives such as the SHA256 digest, or AES encryption are referred to in OpenSSL as "algorithms". There can be more than one implementation for any given algorithm available for use. @@ -45,7 +45,7 @@ L<OSSL_DECODER_CTX_new_for_pkey(3)> =item Default Provider -An OpenSSL Provider that contains the most commmon OpenSSL algorithm +An OpenSSL Provider that contains the most common OpenSSL algorithm implementations. It is loaded by default if no other provider is available. All the algorithm implementations in the Base Provider are also available in the Default Provider. @@ -81,7 +81,7 @@ Fetching is the process of looking through the available algorithm implementations, applying selection criteria (via a property query string), and finally choosing the implementation that will be used. -Also see Explicit Fetching and Implict Fetching. +Also see Explicit Fetching and Implicit Fetching. L<crypto(7)> diff --git a/doc/man7/provider-kdf.pod b/doc/man7/provider-kdf.pod index 6cd76d889e..58337bf3db 100644 --- a/doc/man7/provider-kdf.pod +++ b/doc/man7/provider-kdf.pod @@ -198,7 +198,7 @@ Sets the mode in the associated KDF ctx. =item "pkcs5" (B<OSSL_KDF_PARAM_PKCS5>) <integer> -Enables or diables the SP800-132 compliance checks. +Enables or disables the SP800-132 compliance checks. A mode of 0 enables the compliance checks. The checks performed are: diff --git a/doc/man7/provider-object.pod b/doc/man7/provider-object.pod index 1088e03551..bc82879679 100644 --- a/doc/man7/provider-object.pod +++ b/doc/man7/provider-object.pod @@ -164,7 +164,7 @@ A human readable text that describes extra details on the object. =back -When a provider-native object abtraction is used, it I<must> contain object +When a provider-native object abstraction is used, it I<must> contain object data in at least one form (object data I<passed by value>, i.e. the "data" item, or object data I<passed by reference>, i.e. the "reference" item). Both may be present at once, in which case the OpenSSL library code that |