From: Dr. Stephen Henson Date: Wed, 23 Aug 2017 12:07:23 +0000 (+0100) Subject: Correct GCM docs. X-Git-Tag: OpenSSL_1_1_1-pre1~780 X-Git-Url: https://git.openssl.org/gitweb/?a=commitdiff_plain;h=5e95c1efe6e23f5dd5cd88b8fbb851a999a2c098;p=openssl.git Correct GCM docs. Fix GCM documentation: the tag does not have to be supplied before decrypting any data any more. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/4231) --- diff --git a/doc/man3/EVP_EncryptInit.pod b/doc/man3/EVP_EncryptInit.pod index 66e1ffb688..0aaba05707 100644 --- a/doc/man3/EVP_EncryptInit.pod +++ b/doc/man3/EVP_EncryptInit.pod @@ -442,9 +442,8 @@ either be 16 or the value previously set via EVP_CTRL_OCB_SET_TAGLEN. EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG, taglen, tag); Sets the expected tag to B bytes from B. This call is only legal -when decrypting data and must be made B any data is processed (e.g. -before any EVP_DecryptUpdate() call). For OCB mode the taglen must -either be 16 or the value previously set via EVP_CTRL_AEAD_SET_TAG. +when decrypting data. For OCB mode the taglen must either be 16 or the value +previously set via EVP_CTRL_AEAD_SET_TAG. In OCB mode calling this with B set to NULL sets the tag length. The tag length can only be set before specifying an IV. If not called a default tag