From b60a61e21c6d867fd4a2b8c9fddfc2424be01d53 Mon Sep 17 00:00:00 2001 From: Loup Vaillant Date: Mon, 16 Apr 2018 12:33:49 +0200 Subject: [PATCH] Removed obsolete warning in the manual The length of additional data in authenticated encryption is now authenticated. The user no longer have to worry about it, ever. --- doc/man/man3/crypto_lock.3monocypher | 9 --------- 1 file changed, 9 deletions(-) diff --git a/doc/man/man3/crypto_lock.3monocypher b/doc/man/man3/crypto_lock.3monocypher index 8b8c93d..325e5be 100644 --- a/doc/man/man3/crypto_lock.3monocypher +++ b/doc/man/man3/crypto_lock.3monocypher @@ -152,15 +152,6 @@ and .Fn crypto_unlock . .It Fa ad_size Length of the additional data, in bytes. -.Sy That length is not authenticated. -If the additional data is of variable length, the length should be -appended to -.Fa ad -so it gets authenticated, and should be extracted from the end of the -message when decrypting. -Otherwise an attacker could provide a false length, effectively moving -the boundary between the additional data and the ciphertext. -This may cause buffer overflows in some programs. .El .Pp An incremental interface is available; see -- 2.47.3