openssl/include
slontis 3859a02725 Change PBES2 KDF default salt length to 16 bytes.
The PKCS5 (RFC 8018) standard uses a 64 bit salt length for PBE, and
recommends a minimum of 64 bits for PBES2. For FIPS compliance PBKDF2
requires a salt length of 128 bits.
This affects OpenSSL command line applications such as "genrsa" and "pkcs8"
and API's such as PEM_write_bio_PrivateKey() that are reliant on the
default salt length.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21858)
2023-09-04 14:15:34 +10:00
..
crypto Change PBES2 KDF default salt length to 16 bytes. 2023-09-04 14:15:34 +10:00
internal Move ALIGN32 and ALIGN64 into common.h, and fix for clang-cl.exe 2023-09-04 08:44:21 +10:00
openssl Comment on internal flag 2023-09-01 14:02:54 +01:00