aboutsummaryrefslogtreecommitdiffstats
path: root/sbin/setkey
diff options
context:
space:
mode:
authorAndrey V. Elsukov <ae@FreeBSD.org>2017-02-27 15:30:27 +0000
committerAndrey V. Elsukov <ae@FreeBSD.org>2017-02-27 15:30:27 +0000
commitdb8819460acb798dea54558a2f5d1e6324d5eb41 (patch)
tree3a6fc0c89d82e700f93cde5cf3b7984f13622cbe /sbin/setkey
parent9ff948d05f94965066049938c82c87236d796760 (diff)
downloadsrc-db8819460acb798dea54558a2f5d1e6324d5eb41.tar.gz
src-db8819460acb798dea54558a2f5d1e6324d5eb41.zip
Document that the size of AH ICV for HMAC-SHA2-NNN should be half of
NNN bits as described in RFC4868. PR: 215978
Notes
Notes: svn path=/head/; revision=314339
Diffstat (limited to 'sbin/setkey')
-rw-r--r--sbin/setkey/setkey.89
1 files changed, 4 insertions, 5 deletions
diff --git a/sbin/setkey/setkey.8 b/sbin/setkey/setkey.8
index 4eff17783642..0acc33447ce1 100644
--- a/sbin/setkey/setkey.8
+++ b/sbin/setkey/setkey.8
@@ -29,7 +29,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd February 6, 2017
+.Dd February 27, 2017
.Dt SETKEY 8
.Os
.\"
@@ -593,12 +593,11 @@ keyed-md5 128 ah: 96bit ICV (no document)
keyed-sha1 160 ah: 96bit ICV (no document)
160 ah-old: 128bit ICV (no document)
null 0 to 2048 for debugging
-hmac-sha2-256 256 ah: 96bit ICV
- (draft-ietf-ipsec-ciph-sha-256-00)
+hmac-sha2-256 256 ah: 128bit ICV (RFC4868)
256 ah-old: 128bit ICV (no document)
-hmac-sha2-384 384 ah: 96bit ICV (no document)
+hmac-sha2-384 384 ah: 192bit ICV (RFC4868)
384 ah-old: 128bit ICV (no document)
-hmac-sha2-512 512 ah: 96bit ICV (no document)
+hmac-sha2-512 512 ah: 256bit ICV (RFC4868)
512 ah-old: 128bit ICV (no document)
hmac-ripemd160 160 ah: 96bit ICV (RFC2857)
ah-old: 128bit ICV (no document)