X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=doc%2Fman%2Fenc.pod;h=eceee9fee88b667d58c372f96ce20000e0230c2c;hp=d6875bcc5c70d6fbc245c929a315c596dd4ab341;hb=6d1b637ba149acfa59515a270d8b4f2ee621023f;hpb=fd699ac55f736e5b39b5fe3c244115e6b776eafa diff --git a/doc/man/enc.pod b/doc/man/enc.pod index d6875bcc5c..eceee9fee8 100644 --- a/doc/man/enc.pod +++ b/doc/man/enc.pod @@ -119,8 +119,9 @@ B. A password will be prompted for to derive the key and IV if necessary. -The B<-salt> option should B be used unless you want compatability -with previous versions of OpenSSL and SSLeay. +The B<-salt> option should B be used if the key is being derived +from a password unless you want compatability with previous versions of +OpenSSL and SSLeay. Without the B<-salt> option it is possible to perform efficient dictionary attacks on the password and to attack stream cipher encrypted data. The reason