Skip to content

Commit

Permalink
EVP_KDF.pod: extend text on 'salt' and 'info' parameters
Browse files Browse the repository at this point in the history
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from #21469)

(cherry picked from commit 61c8146)
  • Loading branch information
DDvO authored and paulidale committed Jul 19, 2023
1 parent 9763e69 commit 4316c64
Showing 1 changed file with 10 additions and 1 deletion.
11 changes: 10 additions & 1 deletion doc/man3/EVP_KDF.pod
Original file line number Diff line number Diff line change
Expand Up @@ -191,7 +191,7 @@ For those KDF implementations that support it, this parameter sets the password.

=item "salt" (B<OSSL_KDF_PARAM_SALT>) <octet string>

Some KDF implementations can take a salt.
Some KDF implementations can take a non-secret unique cryptographic salt.
For those KDF implementations that support it, this parameter sets the salt.

The default value, if any, is implementation dependent.
Expand Down Expand Up @@ -227,6 +227,15 @@ Some KDF implementations require a key.
For those KDF implementations that support it, this octet string parameter
sets the key.

=item "info" (B<OSSL_KDF_PARAM_INFO>) <octet string>

Some KDF implementations, such as L<EVP_KDF-HKDF(7)>, take an 'info' parameter
for binding the derived key material
to application- and context-specific information.
This parameter sets the info, fixed info, other info or shared info argument.
You can specify this parameter multiple times, and each instance will
be concatenated to form the final value.

=item "maclen" (B<OSSL_KDF_PARAM_MAC_SIZE>) <unsigned integer>

Used by implementations that use a MAC with a variable output size (KMAC).
Expand Down

0 comments on commit 4316c64

Please sign in to comment.