diff --git a/doc/man1/openssl-fipsinstall.pod.in b/doc/man1/openssl-fipsinstall.pod.in index 88e4a8a20c..ba9229c894 100644 --- a/doc/man1/openssl-fipsinstall.pod.in +++ b/doc/man1/openssl-fipsinstall.pod.in @@ -23,6 +23,7 @@ B [B<-no_conditional_errors>] [B<-no_security_checks>] [B<-ems_check>] +[B<-eddsa_no_verify_digested>] [B<-no_drbg_truncated_digests>] [B<-hkdf_digest_check>] [B<-tls13_kdf_digest_check>] @@ -202,6 +203,12 @@ Configure the module to enable a run-time Extended Master Secret (EMS) check when using the TLS1_PRF KDF algorithm. This check is disabled by default. See RFC 7627 for information related to EMS. +=item B<-eddsa_no_verify_digested> + +Configure the module to not allow EdDSA to verify from a message digest +directly. Instead, EdDSA will digest the message itself. +This check is disabled by default. + =item B<-no_short_mac> Configure the module to not allow short MAC outputs.