diff options
| author | miod <> | 2014-07-10 13:08:58 +0000 |
|---|---|---|
| committer | miod <> | 2014-07-10 13:08:58 +0000 |
| commit | f88d8ec08184c59fa3fe173d7ed4f7ab743ec1d0 (patch) | |
| tree | 4b65e7dddebc9f3ed56aeb299478c2f0029aabfd /src/lib/libcrypto/doc/PKCS7_encrypt.pod | |
| parent | 01835c580bc891d6c335f7dbe03b98ad207ba4ac (diff) | |
| download | openbsd-f88d8ec08184c59fa3fe173d7ed4f7ab743ec1d0.tar.gz openbsd-f88d8ec08184c59fa3fe173d7ed4f7ab743ec1d0.tar.bz2 openbsd-f88d8ec08184c59fa3fe173d7ed4f7ab743ec1d0.zip | |
Attempt to (incompletely) document EVP_aes_*().
When EVP_des_cbc() was suggested, suggest EVP_aes_256_cbc() instead.
Remove mention of EVP_des_ede3_cbc() being the algorithm of choice for S/MIME.
Don't mention US-export limited RC2 algorithms, you'd better not know about
them.
Diffstat (limited to 'src/lib/libcrypto/doc/PKCS7_encrypt.pod')
| -rw-r--r-- | src/lib/libcrypto/doc/PKCS7_encrypt.pod | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/src/lib/libcrypto/doc/PKCS7_encrypt.pod b/src/lib/libcrypto/doc/PKCS7_encrypt.pod index e206684384..8bc77407b9 100644 --- a/src/lib/libcrypto/doc/PKCS7_encrypt.pod +++ b/src/lib/libcrypto/doc/PKCS7_encrypt.pod | |||
| @@ -22,13 +22,6 @@ Only RSA keys are supported in PKCS#7 and envelopedData so the recipient | |||
| 22 | certificates supplied to this function must all contain RSA public keys, though | 22 | certificates supplied to this function must all contain RSA public keys, though |
| 23 | they do not have to be signed using the RSA algorithm. | 23 | they do not have to be signed using the RSA algorithm. |
| 24 | 24 | ||
| 25 | EVP_des_ede3_cbc() (triple DES) is the algorithm of choice for S/MIME use | ||
| 26 | because most clients will support it. | ||
| 27 | |||
| 28 | Some old "export grade" clients may only support weak encryption using 40 or 64 | ||
| 29 | bit RC2. These can be used by passing EVP_rc2_40_cbc() and EVP_rc2_64_cbc() | ||
| 30 | respectively. | ||
| 31 | |||
| 32 | The algorithm passed in the B<cipher> parameter must support ASN1 encoding of | 25 | The algorithm passed in the B<cipher> parameter must support ASN1 encoding of |
| 33 | its parameters. | 26 | its parameters. |
| 34 | 27 | ||
