aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJohn Baldwin <jhb@FreeBSD.org>2021-03-03 23:17:37 +0000
committerJohn Baldwin <jhb@FreeBSD.org>2021-03-03 23:20:57 +0000
commita899ce4ba4c404d342bf892b8b756b66fc65d6b5 (patch)
treeba9479d914b1f1a0d84d19fc703ee6e25b2c5eeb
parenta079e38b08f2f07c50ba915dae66d099559abdcc (diff)
downloadsrc-a899ce4ba4c404d342bf892b8b756b66fc65d6b5.tar.gz
src-a899ce4ba4c404d342bf892b8b756b66fc65d6b5.zip
The ChaCha20 counter is little endian, not big endian.
Reviewed by: cem Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D28755
-rw-r--r--share/man/man7/crypto.74
1 files changed, 2 insertions, 2 deletions
diff --git a/share/man/man7/crypto.7 b/share/man/man7/crypto.7
index ccc2d1fc9be3..6e5bd83621aa 100644
--- a/share/man/man7/crypto.7
+++ b/share/man/man7/crypto.7
@@ -27,7 +27,7 @@
.\"
.\" $FreeBSD$
.\"
-.Dd February 18, 2021
+.Dd March 3, 2021
.Dt CRYPTO 7
.Os
.Sh NAME
@@ -136,7 +136,7 @@ counter rollover.
.Dv CRYPTO_CHACHA20
accepts a 16 byte IV.
The first 8 bytes are used as a nonce.
-The last 8 bytes are used as 64-bit big-endian block counter.
+The last 8 bytes are used as a 64-bit little-endian block counter.
.Ss Authenticated Encryption with Associated Data Algorithms
AEAD algorithms in OCF combine a stream cipher with an authentication
algorithm to provide both secrecy and authentication.