From 04e8382f71d37d133087a69ed332eedde9e33bc2 Mon Sep 17 00:00:00 2001 From: Loup Vaillant Date: Sat, 12 May 2018 18:06:18 +0200 Subject: [PATCH] don't recomend 16 bytes for argon2i digests Listing 16 bytes as a possible size sounds like an endorsement. But really, 16 bytes is a bit short, and weakens the security of the subsequent symmetric crypto. You kind have to know what you are doing to select such a size, so let's not list it. --- doc/man/man3/crypto_argon2i.3monocypher | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/man/man3/crypto_argon2i.3monocypher b/doc/man/man3/crypto_argon2i.3monocypher index 073c757..dd9d547 100644 --- a/doc/man/man3/crypto_argon2i.3monocypher +++ b/doc/man/man3/crypto_argon2i.3monocypher @@ -57,7 +57,7 @@ The output hash. Length of .Fa hash , in bytes. -This argument should be set to 16, 32 or 64 for compatibility with the +This argument should be set to 32 or 64 for compatibility with the .Fn crypto_verify* constant time comparison functions. .It Fa work_area -- 2.47.3