diff options
| -rw-r--r-- | doc/man7/provider-kdf.pod | 6 | ||||
| -rw-r--r-- | include/openssl/core_dispatch.h | 2 |
2 files changed, 5 insertions, 3 deletions
diff --git a/doc/man7/provider-kdf.pod b/doc/man7/provider-kdf.pod index 4d3d91a4e7..0b13537e8d 100644 --- a/doc/man7/provider-kdf.pod +++ b/doc/man7/provider-kdf.pod @@ -24,7 +24,8 @@ provider-kdf - The KDF library E<lt>-E<gt> provider functions /* Encryption/decryption */ int OSSL_FUNC_kdf_reset(void *kctx); - int OSSL_FUNC_kdf_derive(void *kctx, unsigned char *key, size_t keylen); + int OSSL_FUNC_kdf_derive(void *kctx, unsigned char *key, size_t keylen, + const OSSL_PARAM params[]); /* KDF parameter descriptors */ const OSSL_PARAM *OSSL_FUNC_kdf_gettable_params(void *provctx); @@ -108,7 +109,8 @@ I<kctx> parameter and return the duplicate copy. OSSL_FUNC_kdf_reset() initialises a KDF operation given a provider side KDF context in the I<kctx> parameter. -OSSL_FUNC_kdf_derive() performs the KDF operation. +OSSL_FUNC_kdf_derive() performs the KDF operation after processing the +I<params> as per OSSL_FUNC_kdf_set_ctx_params(). The I<kctx> parameter contains a pointer to the provider side context. The resulting key of the desired I<keylen> should be written to I<key>. If the algorithm does not support the requested I<keylen> the function must diff --git a/include/openssl/core_dispatch.h b/include/openssl/core_dispatch.h index 97939a46fe..d4f34557a6 100644 --- a/include/openssl/core_dispatch.h +++ b/include/openssl/core_dispatch.h @@ -374,7 +374,7 @@ OSSL_CORE_MAKE_FUNC(void *, kdf_dupctx, (void *src)) OSSL_CORE_MAKE_FUNC(void, kdf_freectx, (void *kctx)) OSSL_CORE_MAKE_FUNC(void, kdf_reset, (void *kctx)) OSSL_CORE_MAKE_FUNC(int, kdf_derive, (void *kctx, unsigned char *key, - size_t keylen)) + size_t keylen, const OSSL_PARAM params[])) OSSL_CORE_MAKE_FUNC(const OSSL_PARAM *, kdf_gettable_params, (void *provctx)) OSSL_CORE_MAKE_FUNC(const OSSL_PARAM *, kdf_gettable_ctx_params, (void *kctx, void *provctx)) |