Removed obsolete warning in the manual

The length of additional data in authenticated encryption is now
authenticated.  The user no longer have to worry about it, ever.

diff --git a/doc/man/man3/crypto_lock.3monocypher b/doc/man/man3/crypto_lock.3monocypher
index 8b8c93d078250a7e17d9df17ae88266df0304eb4..325e5be24363fe5729e8a7de7682e40545c789e4 100644 (file)
--- a/doc/man/man3/crypto_lock.3monocypher
+++ b/doc/man/man3/crypto_lock.3monocypher
@@ -152,15 +152,6 @@ and
 .Fn crypto_unlock .
 .It Fa ad_size
 Length of the additional data, in bytes.
-.Sy That length is not authenticated.
-If the additional data is of variable length, the length should be
-appended to
-.Fa ad
-so it gets authenticated, and should be extracted from the end of the
-message when decrypting.
-Otherwise an attacker could provide a false length, effectively moving
-the boundary between the additional data and the ciphertext.
-This may cause buffer overflows in some programs.
 .El
 .Pp
 An incremental interface is available; see