| Index: openssl/doc/crypto/EVP_DigestInit.pod
|
| ===================================================================
|
| --- openssl/doc/crypto/EVP_DigestInit.pod (revision 105093)
|
| +++ openssl/doc/crypto/EVP_DigestInit.pod (working copy)
|
| @@ -132,7 +132,9 @@
|
| algorithms respectively. The associated signature algorithm is RSA in each case.
|
|
|
| EVP_dss() and EVP_dss1() return B<EVP_MD> structures for SHA and SHA1 digest
|
| -algorithms but using DSS (DSA) for the signature algorithm.
|
| +algorithms but using DSS (DSA) for the signature algorithm. Note: there is
|
| +no need to use these pseudo-digests in OpenSSL 1.0.0 and later, they are
|
| +however retained for compatibility.
|
|
|
| EVP_md_null() is a "null" message digest that does nothing: i.e. the hash it
|
| returns is of zero length.
|
| @@ -228,12 +230,6 @@
|
| printf("\n");
|
| }
|
|
|
| -=head1 BUGS
|
| -
|
| -The link between digests and signing algorithms results in a situation where
|
| -EVP_sha1() must be used with RSA and EVP_dss1() must be used with DSS
|
| -even though they are identical digests.
|
| -
|
| =head1 SEE ALSO
|
|
|
| L<evp(3)|evp(3)>, L<hmac(3)|hmac(3)>, L<md2(3)|md2(3)>,
|
| @@ -253,4 +249,11 @@
|
| EVP_dss(), EVP_dss1(), EVP_mdc2() and EVP_ripemd160() were
|
| changed to return truely const EVP_MD * in OpenSSL 0.9.7.
|
|
|
| +The link between digests and signing algorithms was fixed in OpenSSL 1.0 and
|
| +later, so now EVP_sha1() can be used with RSA and DSA, there is no need to
|
| +use EVP_dss1() any more.
|
| +
|
| +OpenSSL 1.0 and later does not include the MD2 digest algorithm in the
|
| +default configuration due to its security weaknesses.
|
| +
|
| =cut
|
|
|