Merging upstream version 4.23.0.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 13 insertions, 1 deletions

diff --git a/upstream/archlinux/man7/EVP_MD-SHAKE.7ssl b/upstream/archlinux/man7/EVP_MD-SHAKE.7ssl
index 32bdf4c0..6f966b76 100644
--- a/upstream/archlinux/man7/EVP_MD-SHAKE.7ssl
+++ b/upstream/archlinux/man7/EVP_MD-SHAKE.7ssl
@@ -55,7 +55,7 @@
 .\" ========================================================================
 .\"
 .IX Title "EVP_MD-SHAKE 7ssl"
-.TH EVP_MD-SHAKE 7ssl 2024-01-30 3.2.1 OpenSSL
+.TH EVP_MD-SHAKE 7ssl 2024-04-28 3.3.0 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -113,6 +113,18 @@ maximum security strength of 128 bits, the xoflen should be set to at least 32.
 For backwards compatibility reasons the default xoflen length for SHAKE\-256 is
 32 (bytes) which results in a security strength of only 128 bits. To ensure the
 maximum security strength of 256 bits, the xoflen should be set to at least 64.
+.Sp
+This parameter may be used when calling either \fBEVP_DigestFinal_ex()\fR or
+\&\fBEVP_DigestFinal()\fR, since these functions were not designed to handle variable
+length output. It is recommended to either use \fBEVP_DigestSqueeze()\fR or
+\&\fBEVP_DigestFinalXOF()\fR instead.
+.SH NOTES
+.IX Header "NOTES"
+For SHAKE\-128, to ensure the maximum security strength of 128 bits, the output
+length passed to \fBEVP_DigestFinalXOF()\fR should be at least 32.
+.PP
+For SHAKE\-256, to ensure the maximum security strength of 256 bits, the output
+length passed to \fBEVP_DigestFinalXOF()\fR should be at least 64.
 .SH "SEE ALSO"
 .IX Header "SEE ALSO"
 \&\fBEVP_MD_CTX_set_params\fR\|(3), \fBprovider\-digest\fR\|(7), \fBOSSL_PROVIDER\-default\fR\|(7)