Fix documented max. length for info buffer in HKDF
authorTobias Brunner <tobias@strongswan.org>
Mon, 29 Aug 2022 08:05:56 +0000 (10:05 +0200)
committerTomas Mraz <tomas@openssl.org>
Thu, 1 Sep 2022 10:31:11 +0000 (12:31 +0200)
This limit was increased with 20c2876f24d0 ("Increase
HKDF_MAXBUF from 1024 to 2048").

CLA: trivial

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19085)

(cherry picked from commit d4ffdc42cb579a1ea6e3c95601c5845866028ebb)

doc/man3/EVP_PKEY_CTX_set_hkdf_md.pod

index 15b908e540aa3e113959030a507f0c81c1f4dc1b..81ee5c485b5cc1cb0d1067273aaed724ff06cc24 100644 (file)
@@ -99,7 +99,7 @@ A context for HKDF can be obtained by calling:
 
  EVP_PKEY_CTX *pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_HKDF, NULL);
 
-The total length of the info buffer cannot exceed 1024 bytes in length: this
+The total length of the info buffer cannot exceed 2048 bytes in length: this
 should be more than enough for any normal use of HKDF.
 
 The output length of an HKDF expand operation is specified via the length