openssl/apps
slontis b7cf9dd239 SHAKE documentation updates for default output length.
Fixes #18586

In order to not break existing applications the OpenSSL documentation
related to SHAKE has been updated.

Background:

All digests algorithms (including XOF's) use the bitlen as the default output length.
This results in a security strength of bitlen / 2.

This means that SHAKE128 will by default have an output length of 16
bytes and a security strength of 64 bits.

For SHAKE256 the default output length is 32 bytes and has a security
strength of 128 bits.

This behaviour was present in 1.1.1 and has been duplicated in the
provider SHAKE algorithms for 3.0.

The SHAKE XOF algorithms have a security strength of
min(bitlen, output xof length in bits / 2).

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18622)
2022-08-17 16:17:42 +02:00
..
demoSRP
include APPS/x509: With -CA but both -CAserial and -CAcreateserial not given, use random serial. 2022-07-14 07:23:58 +01:00
lib Fix verify_callback in the openssl s_client/s_server app 2022-07-20 07:37:05 +01:00
asn1parse.c
build.info
ca-cert.srl
ca-key.pem
ca-req.pem
ca.c APPS/x509: With -CA but both -CAserial and -CAcreateserial not given, use random serial. 2022-07-14 07:23:58 +01:00
CA.pl.in
cert.pem
ciphers.c Update copyright year 2022-05-03 13:34:51 +01:00
client.pem
cmp.c Add OSSL_CMP_CTX_get0_validatedSrvCert(), correcting OSSL_CMP_validate_msg() 2022-07-20 11:40:37 +02:00
cms.c Update copyright year 2022-05-03 13:34:51 +01:00
crl2pkcs7.c
crl.c Update copyright year 2022-05-03 13:34:51 +01:00
ct_log_list.cnf
dgst.c SHAKE documentation updates for default output length. 2022-08-17 16:17:42 +02:00
dhparam.c APPS: dhparam: Support setting properties 2022-08-17 09:20:41 +02:00
dsa512.pem
dsa1024.pem
dsa-ca.pem
dsa-pca.pem
dsa.c Update copyright year 2022-05-03 13:34:51 +01:00
dsap.pem
dsaparam.c APPS: dsaparam, gendsa: Support setting properties 2022-07-01 11:11:23 +02:00
ec.c Fix the checks of EVP_PKEY_check 2022-06-02 10:36:56 -04:00
ecparam.c APPS: ecparam: Support setting properties 2022-08-17 09:20:41 +02:00
enc.c Update copyright year 2022-05-03 13:34:51 +01:00
engine.c
errstr.c
fipsinstall.c
gendsa.c APPS: dsaparam, gendsa: Support setting properties 2022-07-01 11:11:23 +02:00
genpkey.c Update copyright year 2022-05-03 13:34:51 +01:00
genrsa.c APPS: genrsa: Support setting properties 2022-08-17 09:20:41 +02:00
info.c
insta.ca.crt
kdf.c
list.c Update copyright year 2022-05-03 13:34:51 +01:00
mac.c
nseq.c
ocsp.c Fixes OSCP->OCSP typo in ocsp command line 2022-07-06 08:25:07 +01:00
openssl-vms.cnf
openssl.c
openssl.cnf
passwd.c Update copyright year 2022-05-03 13:34:51 +01:00
pca-cert.srl
pca-key.pem
pca-req.pem
pkcs7.c Update copyright year 2022-05-03 13:34:51 +01:00
pkcs8.c
pkcs12.c Fix wrong default algorithm in openssl pkcs12 help 2022-08-01 11:54:36 +02:00
pkey.c Update copyright year 2022-05-03 13:34:51 +01:00
pkeyparam.c APPS: pkeyparam: Support setting properties 2022-08-17 09:20:41 +02:00
pkeyutl.c Update copyright year 2022-05-03 13:34:51 +01:00
prime.c Update copyright year 2022-05-03 13:34:51 +01:00
privkey.pem
progs.pl Update copyright year 2022-05-03 13:34:51 +01:00
rand.c Update copyright year 2022-05-03 13:34:51 +01:00
rehash.c Update copyright year 2022-05-03 13:34:51 +01:00
req.c Update copyright year 2022-05-03 13:34:51 +01:00
req.pem
rsa8192.pem
rsa.c Fix the checks of EVP_PKEY_check 2022-06-02 10:36:56 -04:00
rsautl.c
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_client.c s_client -proxy / -starttls shouldn't be mutually exclusive 2022-05-05 13:36:23 +02:00
s_server.c apps/s_server.c: Add check for OPENSSL_strdup 2022-06-22 16:56:40 +10:00
s_time.c
server2.pem
server.pem
server.srl
sess_id.c
smime.c Update copyright year 2022-05-03 13:34:51 +01:00
speed.c Implement AES-GCM-SIV (RFC8452) 2022-07-29 08:32:16 -04:00
spkac.c
srp.c
storeutl.c Update copyright year 2022-05-03 13:34:51 +01:00
testCA.pem
testdsa.h
testrsa.h
timeouts.h
ts.c Fix the checks of X509_LOOKUP_* functions 2022-06-23 12:42:25 +02:00
tsget.in
verify.c Update copyright year 2022-05-03 13:34:51 +01:00
version.c
vms_decc_init.c
x509.c apps/x509: add warnings for options ignored when -CA is not specified 2022-07-14 07:24:27 +01:00