diff options
| author | Tomas Mraz <tomas@openssl.org> | 2021-08-25 17:06:47 +0200 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2021-08-27 10:20:09 +1000 |
| commit | 6f242d224cd1f5d9f4d9b3a1722cca93b92d25b0 (patch) | |
| tree | a3aa6553fa82561b860db88eb574bbf893eb675d /doc/man7/migration_guide.pod | |
| parent | 194fcc9ae09ea7cbe0b3b60c67061e51bb24de79 (diff) | |
| download | openssl-new-6f242d224cd1f5d9f4d9b3a1722cca93b92d25b0.tar.gz | |
doc: Add note about operation parameters validation
Fixes #16394
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16424)
Diffstat (limited to 'doc/man7/migration_guide.pod')
| -rw-r--r-- | doc/man7/migration_guide.pod | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/man7/migration_guide.pod b/doc/man7/migration_guide.pod index 7e0bbf465d..02d2327ee2 100644 --- a/doc/man7/migration_guide.pod +++ b/doc/man7/migration_guide.pod @@ -440,6 +440,18 @@ If using a cipher from a provider the B<EVP_CIPH_FLAG_LENGTH_BITS> flag can only be set B<after> the cipher has been assigned to the cipher context. See L<EVP_EncryptInit(3)/FLAGS> for more information. +=head4 Validation of operation context parameters + +Due to move of the implementation of cryptographic operations to the +providers, validation of various operation parameters can be postponed until +the actual operation is executed where previously it happened immediately +when an operation parameter was set. + +For example when setting an unsupported curve with +EVP_PKEY_CTX_set_ec_paramgen_curve_nid() this function call will not fail +but later keygen operations with the EVP_PKEY_CTX will fail. + + =head2 Installation and Compilation Please refer to the INSTALL.md file in the top of the distribution for |