mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-10-03 15:37:24 +00:00
Fix an inaccuracy
Signed-off-by: Manuel Pégourié-Gonnard <[email protected]>
This commit is contained in:
@@ -162,7 +162,7 @@ match a limitation of the PSA API.
|
|||||||
It is unclear what parameters people use in practice. It looks like by default
|
It is unclear what parameters people use in practice. It looks like by default
|
||||||
OpenSSL picks saltlen = keylen - hashlen - 2 (tested with openssl 1.1.1f).
|
OpenSSL picks saltlen = keylen - hashlen - 2 (tested with openssl 1.1.1f).
|
||||||
The `certool` command provided by GnuTLS seems to be picking saltlen = hashlen
|
The `certool` command provided by GnuTLS seems to be picking saltlen = hashlen
|
||||||
by default (tested with GnuTLS 3.6.13). FIPS 186-4 recommends 0 <= saltlen <=
|
by default (tested with GnuTLS 3.6.13). FIPS 186-4 requires 0 <= saltlen <=
|
||||||
hashlen.
|
hashlen.
|
||||||
|
|
||||||
### Use in TLS
|
### Use in TLS
|
||||||
|
|||||||
Reference in New Issue
Block a user