Clarify docs.

[openssl.git] / doc / man / enc.pod

diff --git a/doc/man/enc.pod b/doc/man/enc.pod
index d6875bcc5c70d6fbc245c929a315c596dd4ab341..eceee9fee88b667d58c372f96ce20000e0230c2c 100644 (file)
--- a/doc/man/enc.pod
+++ b/doc/man/enc.pod
@@ -119,8 +119,9 @@ B<openssl enc -ciphername>.
 
 A password will be prompted for to derive the key and IV if necessary.
 
 
 A password will be prompted for to derive the key and IV if necessary.
 

-The B<-salt> option should B<ALWAYS> be used unless you want compatability
-with previous versions of OpenSSL and SSLeay.
+The B<-salt> option should B<ALWAYS> be used if the key is being derived
+from a password unless you want compatability with previous versions of
+OpenSSL and SSLeay.

 
 Without the B<-salt> option it is possible to perform efficient dictionary
 attacks on the password and to attack stream cipher encrypted data. The reason
 
 Without the B<-salt> option it is possible to perform efficient dictionary
 attacks on the password and to attack stream cipher encrypted data. The reason