diff options
author | John Baldwin <jhb@FreeBSD.org> | 2021-03-03 23:17:37 +0000 |
---|---|---|
committer | John Baldwin <jhb@FreeBSD.org> | 2021-03-03 23:20:57 +0000 |
commit | a899ce4ba4c404d342bf892b8b756b66fc65d6b5 (patch) | |
tree | ba9479d914b1f1a0d84d19fc703ee6e25b2c5eeb | |
parent | a079e38b08f2f07c50ba915dae66d099559abdcc (diff) | |
download | src-a899ce4ba4c404d342bf892b8b756b66fc65d6b5.tar.gz src-a899ce4ba4c404d342bf892b8b756b66fc65d6b5.zip |
The ChaCha20 counter is little endian, not big endian.
Reviewed by: cem
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D28755
-rw-r--r-- | share/man/man7/crypto.7 | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/share/man/man7/crypto.7 b/share/man/man7/crypto.7 index ccc2d1fc9be3..6e5bd83621aa 100644 --- a/share/man/man7/crypto.7 +++ b/share/man/man7/crypto.7 @@ -27,7 +27,7 @@ .\" .\" $FreeBSD$ .\" -.Dd February 18, 2021 +.Dd March 3, 2021 .Dt CRYPTO 7 .Os .Sh NAME @@ -136,7 +136,7 @@ counter rollover. .Dv CRYPTO_CHACHA20 accepts a 16 byte IV. The first 8 bytes are used as a nonce. -The last 8 bytes are used as 64-bit big-endian block counter. +The last 8 bytes are used as a 64-bit little-endian block counter. .Ss Authenticated Encryption with Associated Data Algorithms AEAD algorithms in OCF combine a stream cipher with an authentication algorithm to provide both secrecy and authentication. |