From bc15591d7d36f0c8c9979057da489203c9aa3663 Mon Sep 17 00:00:00 2001 From: Patrick Uiterwijk Date: Thu, 18 Nov 2021 10:47:14 +0100 Subject: Support different R_BITS lengths for KBKDF Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/17063) (cherry picked from commit 0e9a265e42890699dfce82f1ff6905de6aafbd41) --- doc/man7/EVP_KDF-KB.pod | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'doc') diff --git a/doc/man7/EVP_KDF-KB.pod b/doc/man7/EVP_KDF-KB.pod index d4fad66f76..a67268afa7 100644 --- a/doc/man7/EVP_KDF-KB.pod +++ b/doc/man7/EVP_KDF-KB.pod @@ -58,6 +58,13 @@ Set to B<0> to disable use of the optional Fixed Input data 'zero separator' (see SP800-108) that is placed between the Label and Context. The default value of B<1> will be used if unspecified. +=item "r" (B) + +Set the fixed value 'r', indicating the length of the counter in bits. + +Supported values are B<8>, B<16>, B<24>, and B<32>. +The default value of B<32> will be used if unspecified. + =back Depending on whether mac is CMAC or HMAC, either digest or cipher is required -- cgit v1.2.3