diff --git a/doc/man7/EVP_ASYM_CIPHER-RSA.pod b/doc/man7/EVP_ASYM_CIPHER-RSA.pod index 005a20f82f..91de46d80d 100644 --- a/doc/man7/EVP_ASYM_CIPHER-RSA.pod +++ b/doc/man7/EVP_ASYM_CIPHER-RSA.pod @@ -25,6 +25,10 @@ The default provider understands these RSA padding modes in string form: =item "pkcs1" (B) +This padding mode is no longer supported by the FIPS provider for key +agreement and key transport. +(This is a FIPS 140-3 requirement) + =item "x931" (B) =back @@ -37,6 +41,10 @@ The default provider understands these RSA padding modes in integer form: =item 1 (B) +This padding mode is no longer supported by the FIPS provider for key +agreement and key transport. +(This is a FIPS 140-3 requirement) + =item 3 (B) =item 4 (B) @@ -71,6 +79,11 @@ See B on the page L See L for more information. +=item "pkcs15-padding-disabled" (B) + +If nonzero, PKCS#1 version 1.5 padding is disabled. +This option is used by the OpenSSL FIPS provider. + =back =head1 SEE ALSO