diff --git a/doc/man7/EVP_KDF-KB.pod b/doc/man7/EVP_KDF-KB.pod index 3020a42a81..d4fad66f76 100644 --- a/doc/man7/EVP_KDF-KB.pod +++ b/doc/man7/EVP_KDF-KB.pod @@ -47,12 +47,12 @@ The value is either CMAC or HMAC. The seed parameter is unused in counter mode. -=item "use-l" (B) +=item "use-l" (B) Set to B<0> to disable use of the optional Fixed Input data 'L' (see SP800-108). The default value of B<1> will be used if unspecified. -=item "use-separator" (B) +=item "use-separator" (B) Set to B<0> to disable use of the optional Fixed Input data 'zero separator' (see SP800-108) that is placed between the Label and Context. diff --git a/doc/man7/EVP_KEYEXCH-DH.pod b/doc/man7/EVP_KEYEXCH-DH.pod index 34930ef1f7..fc38531ae9 100644 --- a/doc/man7/EVP_KEYEXCH-DH.pod +++ b/doc/man7/EVP_KEYEXCH-DH.pod @@ -17,12 +17,12 @@ Key exchange support for the B key type. See L. -=item "kdf-ukm" (B) +=item "kdf-ukm" (B) Sets the User Key Material to be used as part of the selected Key Derivation Function associated with the given key exchange ctx. -=item "kdf-ukm" (B) +=item "kdf-ukm" (B) Gets a pointer to the User Key Material to be used as part of the selected Key Derivation Function associated with the given key exchange ctx. Providers diff --git a/doc/man7/EVP_KEYEXCH-ECDH.pod b/doc/man7/EVP_KEYEXCH-ECDH.pod index 001df6ba0c..95076b1ebd 100644 --- a/doc/man7/EVP_KEYEXCH-ECDH.pod +++ b/doc/man7/EVP_KEYEXCH-ECDH.pod @@ -31,33 +31,34 @@ See also L for the related B parameter that can be set on a per-key basis. -=item "kdf-type" (B) +=item "kdf-type" (B) Sets or gets the Key Derivation Function type to apply within the associated key exchange ctx. -=item "kdf-digest" (B) +=item "kdf-digest" (B) Sets or gets the Digest algorithm to be used as part of the Key Derivation Function associated with the given key exchange ctx. -=item "kdf-digest-props" (B) +=item "kdf-digest-props" (B) Sets properties to be used upon look up of the implementation for the selected Digest algorithm for the Key Derivation Function associated with the given key exchange ctx. -=item "kdf-outlen" (B) +=item "kdf-outlen" (B) Sets or gets the desired size for the output of the chosen Key Derivation Function associated with the given key exchange ctx. +The length of the "kdf-outlen" parameter should not exceed that of a B. -=item "kdf-ukm" (B) +=item "kdf-ukm" (B) Sets the User Key Material to be used as part of the selected Key Derivation Function associated with the given key exchange ctx. -=item "kdf-ukm" (B) +=item "kdf-ukm" (B) Gets a pointer to the User Key Material to be used as part of the selected Key Derivation Function associated with the given key exchange ctx. Providers diff --git a/doc/man7/EVP_PKEY-DH.pod b/doc/man7/EVP_PKEY-DH.pod index 63ab9d10d1..c5ba90ec8c 100644 --- a/doc/man7/EVP_PKEY-DH.pod +++ b/doc/man7/EVP_PKEY-DH.pod @@ -90,7 +90,7 @@ B and B keytype implementation supports the following: =over 4 -=item "type" (B) +=item "type" (B) Sets the type of parameter generation. For B valid values are: diff --git a/doc/man7/EVP_PKEY-EC.pod b/doc/man7/EVP_PKEY-EC.pod index 7555d71957..839d18a894 100644 --- a/doc/man7/EVP_PKEY-EC.pod +++ b/doc/man7/EVP_PKEY-EC.pod @@ -24,11 +24,11 @@ built-in EC algorithm: =over 4 -=item "group" (B) +=item "group" (B) The curve name. -=item "field-type" (B) +=item "field-type" (B) The value should be either "prime-field" or "characteristic-two-field", which correspond to prime field Fp and binary field F2^m. @@ -74,18 +74,18 @@ Enable Cofactor DH (ECC CDH) if this value is 1, otherwise it uses normal EC DH if the value is zero. The cofactor variant multiplies the shared secret by the EC curve's cofactor (note for some curves the cofactor is 1). -=item "encoding" (B) +=item "encoding" (B) Set the format used for serializing the EC group parameters. Valid values are "explicit" or "named_curve". The default value is "named_curve". -=item "point-format" (B) +=item "point-format" (B) Sets or gets the point_conversion_form for the I. For a description of point_conversion_forms please see L. Valid values are "uncompressed" or "compressed". The default value is "uncompressed". -=item "group-check" (B) +=item "group-check" (B) Sets or Gets the type of group check done when EVP_PKEY_param_check() is called. Valid values are "default", "named" and "named-nist". @@ -123,7 +123,7 @@ The following Gettable types are also available for the built-in EC algorithm: =over 4 -=item "basis-type" (B) +=item "basis-type" (B) Supports the values "tpBasis" for a trinomial or "ppBasis" for a pentanomial. This field is only used for a binary field F2^m. diff --git a/doc/man7/EVP_PKEY-FFC.pod b/doc/man7/EVP_PKEY-FFC.pod index e345580ec1..9de066a865 100644 --- a/doc/man7/EVP_PKEY-FFC.pod +++ b/doc/man7/EVP_PKEY-FFC.pod @@ -108,7 +108,7 @@ The following key generation types are available for DSA and DHX algorithms: =over 4 -=item "type" (B) +=item "type" (B) Sets the type of parameter generation. The shared valid values are: @@ -140,13 +140,13 @@ Sets the size (in bits) of the prime 'q'. For "fips186_4" this can be either 224 or 256. For "fips186_2" this has a size of 160. -=item "digest" (B) +=item "digest" (B) Sets the Digest algorithm to be used as part of the Key Generation Function associated with the given Key Generation I. This must also be set for key validation. -=item "properties" (B) +=item "properties" (B) Sets properties to be used upon look up of the implementation for the selected Digest algorithm for the Key Generation Function associated with the given key diff --git a/doc/man7/EVP_PKEY-X25519.pod b/doc/man7/EVP_PKEY-X25519.pod index 80a1a627d0..6fa75ba3c1 100644 --- a/doc/man7/EVP_PKEY-X25519.pod +++ b/doc/man7/EVP_PKEY-X25519.pod @@ -52,7 +52,7 @@ RFC7748. =over 4 -=item "mandatory-digest" (B) +=item "mandatory-digest" (B) The empty string, signifying that no digest may be specified. diff --git a/doc/man7/EVP_RAND-CTR-DRBG.pod b/doc/man7/EVP_RAND-CTR-DRBG.pod index a8e92e5235..57e53c314b 100644 --- a/doc/man7/EVP_RAND-CTR-DRBG.pod +++ b/doc/man7/EVP_RAND-CTR-DRBG.pod @@ -50,7 +50,7 @@ The supported parameters are: These parameters work as described in L. -=item "use_derivation_function" (B) +=item "use_derivation_function" (B) This Boolean indicates if a derivation function should be used or not. A nonzero value (the default) uses the derivation function. A zero value diff --git a/doc/man7/provider-base.pod b/doc/man7/provider-base.pod index 7bead3a45d..c07f9fddf6 100644 --- a/doc/man7/provider-base.pod +++ b/doc/man7/provider-base.pod @@ -313,17 +313,17 @@ provider_get_params() can return the following provider parameters to the core: =over 4 -=item "name" (B) +=item "name" (B) This points to a string that should give a unique name for the provider. -=item "version" (B) +=item "version" (B) This points to a string that is a version number associated with this provider. OpenSSL in-built providers use OPENSSL_VERSION_STR, but this may be different for any third party provider. This string is for informational purposes only. -=item "buildinfo" (B) +=item "buildinfo" (B) This points to a string that is a build information associated with this provider. OpenSSL in-built providers use OPENSSL_FULL_VERSION_STR, but this may be @@ -345,16 +345,16 @@ core_get_params() can retrieve the following core parameters for each provider: =over 4 -=item "openssl-version" (B) +=item "openssl-version" (B) This points to the OpenSSL libraries' full version string, i.e. the string expanded from the macro B. -=item "provider-name" (B) +=item "provider-name" (B) This points to the OpenSSL libraries' idea of what the calling provider is named. -=item "module-filename" (B) +=item "module-filename" (B) This points to a string containing the full filename of the providers module file. @@ -433,12 +433,12 @@ B): =over 4 -=item "tls-group-name" (B) +=item "tls-group-name" (B) The name of the group as given in the IANA TLS Supported Groups registry L. -=item "tls-group-name-internal" (B) +=item "tls-group-name-internal" (B) The name of the group as known by the provider. This could be the same as the "tls-group-name", but does not have to be. @@ -447,7 +447,7 @@ The name of the group as known by the provider. This could be the same as the The TLS group id value as given in the IANA TLS Supported Groups registry. -=item "tls-group-alg" (B) +=item "tls-group-alg" (B) The name of a Key Management algorithm that the provider offers and that should be used with this group. Keys created should be able to support I diff --git a/doc/man7/provider-cipher.pod b/doc/man7/provider-cipher.pod index 26c4e57852..c0ff5f9d51 100644 --- a/doc/man7/provider-cipher.pod +++ b/doc/man7/provider-cipher.pod @@ -435,7 +435,7 @@ Byte 11-12: Input length (Always 0) Gets the result of running the "tls1multi_aad" operation. -=item "cts_mode" (B) +=item "cts_mode" (B) Sets the cipher text stealing mode. For all modes the output size is the same as the input size. diff --git a/doc/man7/provider-object.pod b/doc/man7/provider-object.pod index 2380dd4b17..0032477e0f 100644 --- a/doc/man7/provider-object.pod +++ b/doc/man7/provider-object.pod @@ -94,7 +94,7 @@ of the following parameters: =over 4 -=item "data" (B) or +=item "data" (B) or The object data I. @@ -142,7 +142,7 @@ B object with d2i_X509_CRL(). =back -=item "data-type" (B) +=item "data-type" (B) The specific type of the object content. Legitimate values depend on the object type; if it is B, the data type is expected to be a @@ -153,12 +153,12 @@ data. is either missing or has the value OSSL_OBJECT_UNKNOWN), libcrypto interprets the object data type as the input type for a decoder. -=item "data-structure" (B) +=item "data-structure" (B) The outermost structure of the object content. Legitimate values depend on the object type. -=item "desc" (B) +=item "desc" (B) A human readable text that describes extra details on the object. diff --git a/doc/man7/provider-storemgmt.pod b/doc/man7/provider-storemgmt.pod index d34f0377ae..0da07a11dc 100644 --- a/doc/man7/provider-storemgmt.pod +++ b/doc/man7/provider-storemgmt.pod @@ -141,14 +141,14 @@ The contents of the octet string is expected to be in DER form. Indicates that the caller wants to search for an object with the given serial number associated. -=item "digest" (B) +=item "digest" (B) =item "fingerprint" (B) Indicates that the caller wants to search for an object with the given fingerprint, computed with the given digest. -=item "alias" (B) +=item "alias" (B) Indicates that the caller wants to search for an object with the given alias (some call it a "friendly name").