don't recomend 16 bytes for argon2i digests

Listing 16 bytes as a possible size sounds like an endorsement.
But really, 16 bytes is a bit short, and weakens the security
of the subsequent symmetric crypto. You kind have to know what
you are doing to select such a size, so let's not list it.

diff --git a/doc/man/man3/crypto_argon2i.3monocypher b/doc/man/man3/crypto_argon2i.3monocypher
index 073c757ded0ab4357a54da699f6ba2d28a95bdfa..dd9d547fb3f3bbd5a615fd866822d5de7d413b40 100644 (file)
--- a/doc/man/man3/crypto_argon2i.3monocypher
+++ b/doc/man/man3/crypto_argon2i.3monocypher
@@ -57,7 +57,7 @@ The output hash.
 Length of
 .Fa hash ,
 in bytes.
-This argument should be set to 16, 32 or 64 for compatibility with the
+This argument should be set to 32 or 64 for compatibility with the
 .Fn crypto_verify*
 constant time comparison functions.
 .It Fa work_area