From 6d1b637ba149acfa59515a270d8b4f2ee621023f Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Tue, 16 Nov 1999 02:51:41 +0000 Subject: [PATCH] Clarify docs. --- doc/man/enc.pod | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/doc/man/enc.pod b/doc/man/enc.pod index d6875bcc5c..eceee9fee8 100644 --- a/doc/man/enc.pod +++ b/doc/man/enc.pod @@ -119,8 +119,9 @@ B. A password will be prompted for to derive the key and IV if necessary. -The B<-salt> option should B be used unless you want compatability -with previous versions of OpenSSL and SSLeay. +The B<-salt> option should B be used if the key is being derived +from a password unless you want compatability with previous versions of +OpenSSL and SSLeay. Without the B<-salt> option it is possible to perform efficient dictionary attacks on the password and to attack stream cipher encrypted data. The reason -- 2.34.1