2092 Commits

Author	SHA1	Message	Date
openssl-machine	b08f255364	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Release: yes	2025-09-30 12:55:37 +00:00
Bob Beck	c4bbbc1bad	Correct the documentation for OPENSSL_sk_find ... Since April of 2023 with commit eb0935f, these functions have not sorted the stack if it was not sorted. The documentation was noti changed at the time to reflect this changed behaviour. This corrects the documentation to reflect the current behaviour of these functions Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28578) (cherry picked from commit 07e70f951e)	2025-09-24 12:28:07 +02:00
Richard Levitte	f1fd3d5235	Fix OPENSSL_VERSION_NUMBER to always have zero status bits ... The documentation suggested that they were always zero, while the implementation in <openssl/opensslv.h> suggested that it could be 0xf in OpenSSL releases... which (almost) never happened because of a bug in said implementation. Therefore, we solidify that the status bits are indeed always zero, at least in all OpenSSL 3 versions. Resolves: https://github.com/openssl/project/issues/1621 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28603) (cherry picked from commit 60c4feacce)	2025-09-20 09:30:04 +02:00
Grzesiek11	e800c459ee	Fix cipher protocol ID type in docs ... The cipher protocol ID, the return type of SSL_CIPHER_get_protocol_id, is uint16_t and correctly described in docs to be 2 bytes, however the function signature on the same page incorrectly pointed to it being uint32_t, which is 4 bytes. CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28523) (cherry picked from commit 9bdf93776d)	2025-09-18 17:29:33 +02:00
Ritesh Kudkelwar	ddc3889acd	doc: clarify SSL_SESSION_get0_hostname() DESCRIPTION ... Also refine RETURN VALUES. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28393) (cherry picked from commit 32ec975213)	2025-09-18 17:21:26 +02:00
Eugene Syromiatnikov	c3ee9d5b38	doc/man3/RAND_load_file.pod: RAND_load_file on non-regular files with bytes=-1 ... Mention that RAND_load_file attempts to read only RAND_DRBG_STRENGTH bytes on non-regular files if the number of bytes to be read is not specified explicitly. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28379) (cherry picked from commit 0daaf33275)	2025-09-09 20:22:38 +02:00
Eugene Syromiatnikov	e9b4071c66	crypto/rand/randfile.c: avoid signed integer overflow in RAND_load_file ... If a file supplied to RAND_load_file is too big (more than INT_MAX bytes), it is possible to trigger a signer integer overflow during ret calculation. Avoid it by returning early when we are about to hit it on the next iteration. Reported-by: Liu-Ermeng <liuermeng2@huawei.com> Resolves: https://github.com/openssl/openssl/issues/28375 Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28379) (cherry picked from commit 35db6a15d4)	2025-09-09 20:22:37 +02:00
Viperinius	2854347701	Fix typo in BN_generate_prime docs ... CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28395) (cherry picked from commit b64ac3cb83)	2025-09-09 11:11:45 +02:00
Ryan Hooper	750b91d1ea	doc: Update documentation of SSL_CTX_set_dh_auto() ... Update the documentation of the dh_tmp_auto argument in regards to its behavior when the argument value is 2. Fixes #27606 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28366) (cherry picked from commit 7600608eab)	2025-09-09 11:01:35 +02:00
Norbert Pocs	99c29b7cb1	docs: Be case specific with links to man headers ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28356) (cherry picked from commit 56ce30abb7)	2025-09-09 10:29:36 +02:00
Dr. David von Oheimb	e3e403f8e3	d2i_X509.pod: add missing doc of return value of i2d_ASN1_bio_stream() ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27567) (cherry picked from commit 4376c9571a)	2025-08-18 18:03:40 +02:00
Nikola Pajkovsky	ae62a5a590	sec_mem: add note about the perf implications ... Testing secure storage for ml-kem/dsa [1] shows performace penalty when secure storage is enabled. | Threads | baseline usec/handshake | secmem usec/handshake | |---------+-------------------------+-----------------------| | 1 | 586.784756 | 588.306131 | | 2 | 599.537648 | 601.007393 | | 4 | 610.663361 | 613.600663 | | 8 | 649.347376 | 869.693358 | | 16 | 1176.402781 | 2487.335286 | | 32 | 2345.594618 | 5155.747515 | | 64 | 4697.556045 | 11170.627031 | the test shows that sec mem is ok-ish up to the number of available cores, and when the sec mem lock gets contended, performance goes down rapidly. Tested on Apple M4 Pro. [1] https://github.com/openssl/openssl/pull/27625 Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28011) (cherry picked from commit b8cc327660)	2025-07-14 11:20:01 -04:00
Michael Baentsch	1b323ecc43	Add note about use of EVP_PKEY in different libctxs ... Co-authored-by: Shane Lontis <slontis@oracle.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26309) (cherry picked from commit b2ac43b0d8)	2025-07-10 14:45:21 +02:00
Tomas Mraz	ae6c3d3de7	PEM_read_CMS.pod: Correct the deprecation notice ... Fixes #27863 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27865) (cherry picked from commit 9a6376dd75)	2025-07-10 14:41:56 +02:00
openssl-machine	c1a2246377	Copyright year updates ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Release: yes	2025-07-01 11:59:57 +00:00
noctuelles	193512babd	fix: Better documentation on DTLS_set_timer_cb() ... Also more precise description of DTLS timeout mechanism. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27800) (cherry picked from commit 49885aebe7)	2025-06-13 12:49:19 +02:00
Viktor Dukhovni	4871e4953a	Allow keygen after dup of minimal PKEY ctx ... It should be possible to repeatedly duplicate a PKEY CTX created via EVP_PKEY_CTX_new_from_name() that has not yet been assigned an "operation" (e.g. via EVP_PKEY_CTX_keygen_init()), and then perform keygen_init() and keygen() on the duplicated copies. When the operation is not yet set, all that's needed is to not try to use the key if one isn't set yet. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27662) (cherry picked from commit 2c74a8d1ef)	2025-06-10 19:44:19 +02:00
Pauli	1aee3738f7	rand: document the EVP_RAND_nonce() return correctly ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27766) (cherry picked from commit e81b252a95)	2025-06-09 10:26:50 +02:00
Matt Caswell	560071cb17	Update documentation regarding no_renegotiation handling ... Clarify what happens in the event that a no_renegotiation alert is received. Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591) (cherry picked from commit 0db6a59ea7)	2025-06-04 17:28:26 +02:00
Ryan Schanzenbacher	9f2eb6d35a	docs: update OSSL_PARAM_int documentation ... This change adds an example to allow compilation without warnings using compiler options like `-Wincompatible-pointer-types-discards-qualifiers` Code for the example was inspired by libarchive's 9e3a7e4b6c Fixes #20956 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27157) (cherry picked from commit b83b67fe59)	2025-04-24 14:41:23 +02:00
Norbert Pocs	9238c26c36	Document SSL_CTX_set_min_proto_version defaults ... If the function is not called the settings default to 0. Fixes #10584 Signed-off-by: Norbert Pocs <norbertpocs0@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27410) (cherry picked from commit 871182d29d)	2025-04-18 15:45:04 +01:00
David Benjamin	0aebf20000	Fix PKCS7_sign and CMS_sign default hash documentation ... Fixes #27291. See issue for details. Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27292) (cherry picked from commit 4f81470afa)	2025-04-15 15:40:56 +01:00
Matt Caswell	85df287a87	Link SSL_get_negotiated_group() and SSL_get0_group_name() in the docs ... If you are intereseted in one you might be interested in the other. Fixes #27137 Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27210) (cherry picked from commit 9eb21877f5)	2025-04-02 08:49:04 +02:00
Kyle Mullen	2fad02a4d6	Update X509_VERIFY_PARAM_set_flags.pod ... Change description of B<X509_V_FLAG_CRL_CHECK_ALL> to reflect its inability to function without B<X509_V_FLAG_CRL_CHECK> being enabled as well. Fixes #27056 (https://github.com/openssl/openssl/issues/27056) CLA: trivial Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27098) (cherry picked from commit b7d3c729b1)	2025-03-27 10:31:49 +01:00
RSA-1977	9f060d0bae	Updated SSL_SESSION_get0_hostname() documentation to be consistent with the function ... CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26559) (cherry picked from commit 8d6fd6142b)	2025-03-05 19:13:12 +01:00
openssl-machine	06243d4e86	Copyright year updates ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-02-11 14:32:03 +00:00
Michael Baentsch	22fafd3f20	Improve ASN1_TIME_print documentation and output ... This adds missing GMT indication when printing the local time as it is converted to the UTC timezone before printing. Also fixing the fractional seconds printing on EBCDIC platforms. Fixes #26313 Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26344) (cherry picked from commit c81ff97866)	2025-01-22 11:31:18 +01:00
otherddn1978	71e8158b36	If you call X509_add_cert with cert == NULL and the X509_ADD_FLAG_UP_REF ... flag, it will сrash to X509_up_ref. Passing NULL here is not valid, return 0 if cert == NULL. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26267) (cherry picked from commit 3c7db9e0fd)	2025-01-20 08:44:31 +01:00
Richard Levitte	17232fcc34	Fix documentation of OSSL_ASYM_CIPHER_PARAM_IMPLICIT_REJECTION ... This drops OSSL_PKEY_PARAM_IMPLICIT_REJECTION - which is a meaningless name - everywhere apart from still existing (for API stability, in case someone uses that macro). Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26421) (cherry picked from commit 1df07c761b)	2025-01-17 18:55:12 +01:00
Tom Fay	dff989ba45	Correct documented KEM ids for OSSL_HPKE_str2suite ... CLA: trivial Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26159) (cherry picked from commit 62f9fd832a)	2025-01-15 16:04:17 +01:00
Tom Cosgrove	88729a5d63	Fix obvious misspelling of ASN1_VALUE ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26118) (cherry picked from commit 4188ab2b19)	2025-01-14 12:06:53 +01:00
Tom Cosgrove	eba8bab12f	Fix double 'the's ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26118) (cherry picked from commit 690bb5192c)	2025-01-14 12:06:51 +01:00
Michael Baentsch	d51b96ab84	Correct return value documentation for X509V3_set_ctx() ... Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26295) (cherry picked from commit 817a2b2b49)	2025-01-03 16:58:16 +01:00
Sasha Romijn	95e52e9756	Fix typo in SSL_get_shared_sigalgs docs ... psighash -> psignhash CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26151) (cherry picked from commit 1b3b5a019a)	2024-12-13 11:38:41 +01:00
Michael Baentsch	9f49d9d5f8	Add HISTORY to BIO_s_mem documentation ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26146) (cherry picked from commit 8cbe6e5a81)	2024-12-13 11:27:44 +01:00
Dr. David von Oheimb	77ee579edd	X509: document non-standard behavior checking EKU extensions in CA and TA certs ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26142) (cherry picked from commit a82c2bf5c9)	2024-12-13 08:27:29 +01:00
Frederik Wedel-Heinen	f7243cb777	Minor nit fix to EVP_CipherFinal_ex() return code documentation. ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25849) (cherry picked from commit 54332adf29)	2024-11-29 19:03:32 +01:00
David Benjamin	1f97b41446	Document expected BIO operations for libssl ... If your custom BIO does not implement BIO_CTRL_FLUSH, it won't work, but this is not document anywhere. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26060) (cherry picked from commit 847a23757f)	2024-11-27 13:03:19 +01:00
Alicja Kario	38eb629747	man ECDSA_sign(3): fix wrong variable names ... the parameters in the function definitions use `siglen` not `sig_len`, this fixes the doc text. Signed-off-by: Alicja Kario <hkario@redhat.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25927) (cherry picked from commit eaf4da97c9)	2024-11-13 17:33:05 +01:00
Dr. David von Oheimb	a9e19a82dc	TRACE: automatically respect disabled categories ... by fixing OSSL_trace_begin() to return NULL when given category is not enabled Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25652) (cherry picked from commit 72d3e9bac4)	2024-10-23 15:17:02 +02:00
Dr. David von Oheimb	754b2683cd	improve and move text on OPENSSL_TRACE from doc/man1/openssl.pod to doc/man7/openssl-env.pod ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25540) (cherry picked from commit ee0bf38e87)	2024-10-09 12:11:16 +02:00
Dmitry Belyavskiy	b4e80d8250	Documenting CRL download usage and restrictions ... Fixes #25603 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25608) (cherry picked from commit e647220c00)	2024-10-08 16:00:09 +02:00
Neil Horman	6812fa1d0f	Add some documentation to describe the encap/decap requirements ... Document the fact that we now require unwrappedlen/wrappedlen to be set to the size of the unwrapped/wrapped buffers Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25522) (cherry picked from commit 1c1223ff53)	2024-10-07 17:48:02 +02:00
Зишан Мирза	fcca3c3e79	Fix examples in EVP_PKEY_encapsulate/decapsulate documentation ... Fixes #25448 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25450) (cherry picked from commit 4f899849ce)	2024-09-26 10:30:42 +02:00
David von Oheimb	401ece7dda	doc/man{1,3}: fix details on IPv6 host addresses and of whitespace in no_proxy ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25010) (cherry picked from commit ac91bd88d9)	2024-09-23 22:16:55 +02:00
David von Oheimb	bbe46ba584	OSSL_HTTP_adapt_proxy(): fix handling of escaped IPv6 host addresses and of whitespace in no_proxy ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25010) (cherry picked from commit fe004a09ac)	2024-09-23 22:16:54 +02:00
David von Oheimb	8fe5ed92fb	BIO_s_accept.pod: fix whitespace nits: '<=0' -> '<= 0' ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25010) (cherry picked from commit 907ddee3ea)	2024-09-23 22:16:49 +02:00
Alex Shaindlin	f7497fc69c	doc/man3/OSSL_PARAM.pod: Correct the type of data_type ... CLA: trivial Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/25486) (cherry picked from commit f5a8f65b80)	2024-09-19 20:54:26 +02:00
erbsland-dev	e35eb23815	Clarify Tag Length Setting in OCB Mode ... Fixes #8331: Updated the description for setting the tag length in OCB mode to remove the misleading “when encrypting” and “during encryption” phrasing. This change emphasizes that setting a custom tag length requires a call with NULL, applicable to both encryption and decryption contexts. Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25424) (cherry picked from commit 1299699a90)	2024-09-19 20:52:00 +02:00
erbsland-dev	f0822255b1	Clarify EVP_CipherUpdate() authenticated bytes behavior ... Fixes #8310: Document that the number of authenticated bytes returned by EVP_CipherUpdate() varies with the cipher used. Mention that stream ciphers like ChaCha20 can handle 1 byte at a time, while OCB mode requires processing data one block at a time. Ensure it's clear that passing unpadded data in one call is safe. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24961) (cherry picked from commit d15077d336)	2024-09-05 17:14:50 +02:00