diff options
author | Neil Horman <nhorman@openssl.org> | 2023-12-14 12:15:21 -0500 |
---|---|---|
committer | Neil Horman <nhorman@openssl.org> | 2023-12-26 10:36:00 -0500 |
commit | 62457fd9415d707baf76f219bbb9a29106ba092b (patch) | |
tree | d135738617dbb74606389abd273db03f63c8714c /doc/man7 | |
parent | d6e4056805f54bb1a0ef41fa3a6a35b70c94edba (diff) | |
download | openssl-62457fd9415d707baf76f219bbb9a29106ba092b.tar.gz |
Ignore OSSL_MAC_PARAM_DIGEST_NOINIT/OSSL_MAC_PARAM_DIGEST_ONESHOT
The hmac flags OSSL_MAC_PARAM_DIGEST_NOINIT and
OSSL_MAC_PARAM_DIGEST_ONESHOT dont add any real value to the provider,
and the former causes a segfault when the provider attempts to call
EVP_MAC_init on an EVP_MAC object that has been instructed not to be
initalized (as the update function will not have been set in the MAC
object, which is unilaterally called from EVP_MAC_init
Remove the tests for the above flags, and document them as being
deprecated and ignored.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/23054)
Diffstat (limited to 'doc/man7')
-rw-r--r-- | doc/man7/EVP_MAC-HMAC.pod | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/man7/EVP_MAC-HMAC.pod b/doc/man7/EVP_MAC-HMAC.pod index 0e401710fc..474f62bb49 100644 --- a/doc/man7/EVP_MAC-HMAC.pod +++ b/doc/man7/EVP_MAC-HMAC.pod @@ -51,11 +51,15 @@ B<OSSL_MAC_PARAM_DIGEST>) to be considered valid. A flag to set the MAC digest to not initialise the implementation specific data. The value 0 or 1 is expected. +This option is deprecated and will be removed in a future release. +It may be set but is currently ignored =item "digest-oneshot" (B<OSSL_MAC_PARAM_DIGEST_ONESHOT>) <integer> A flag to set the MAC digest to be a one-shot operation. The value 0 or 1 is expected. +This option is deprecated and will be removed in a future release. +It may be set but is currently ignored. =item "tls-data-size" (B<OSSL_MAC_PARAM_TLS_DATA_SIZE>) <unsigned integer> |