diff options
| author | Matt Caswell <matt@openssl.org> | 2019-04-18 11:54:58 +0200 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2019-04-19 10:37:47 +0200 |
| commit | 6f3aae256d62cfcc48c07cc0ead5080b070f371b (patch) | |
| tree | b56ceff6bc55ffa89377e1a24a0dd627e9cbf449 /doc/man3/EVP_chacha20.pod | |
| parent | Create provider errors and use them (diff) | |
| download | openssl-6f3aae256d62cfcc48c07cc0ead5080b070f371b.tar.xz openssl-6f3aae256d62cfcc48c07cc0ead5080b070f371b.zip | |
Clarify the documentation on the use of ChaCha20
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8780)
Diffstat (limited to 'doc/man3/EVP_chacha20.pod')
| -rw-r--r-- | doc/man3/EVP_chacha20.pod | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/doc/man3/EVP_chacha20.pod b/doc/man3/EVP_chacha20.pod index 7b014c2675..5218ee215f 100644 --- a/doc/man3/EVP_chacha20.pod +++ b/doc/man3/EVP_chacha20.pod @@ -21,7 +21,15 @@ The ChaCha20 stream cipher for EVP. =item EVP_chacha20() -The ChaCha20 stream cipher. The key length is 256 bits, the IV is 96 bits long. +The ChaCha20 stream cipher. The key length is 256 bits, the IV is 128 bits long. +The first 32 bits consists of a counter in little-endian order followed by a 96 +bit nonce. For example a nonce of: + +000000000000000000000002 + +With an initial counter of 42 (2a in hex) would be expressed as: + +2a000000000000000000000000000002 =item EVP_chacha20_poly1305() |