summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
authorToke Høiland-Jørgensen <toke@toke.dk>2021-04-10 17:33:28 +0200
committerOndrej Zajicek (work) <santiago@crfreenet.org>2021-06-06 16:26:58 +0200
commit725d9af94a6eaf3cbce1b107e36c8cf342828ea6 (patch)
tree5d7533ca9ba06ad1c836e70f9efbeeeaf6130d9b /doc
parente5724f71d2c054bc51d66092beb6af4da21e0c62 (diff)
Lib: Add Blake2s and Blake2b hash functions
The Babel MAC authentication RFC recommends implementing Blake2s as one of the supported algorithms. In order to achieve do this, add the blake2b and blake2s hash functions for MAC authentication. The hashing function implementations are the reference implementations from blake2.net. The Blake2 algorithms allow specifying an arbitrary output size, and the Babel MAC spec says to implement Blake2s with 128-bit output. To satisfy this, we add two different variants of each of the algorithms, one using the default size (256 bits for Blake2s, 512 bits for Blake2b), and one using half the default output size. Update to BIRD coding style done by committer.
Diffstat (limited to 'doc')
-rw-r--r--doc/bird.sgml2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/bird.sgml b/doc/bird.sgml
index 90ceb184..bd1ed7ed 100644
--- a/doc/bird.sgml
+++ b/doc/bird.sgml
@@ -820,7 +820,7 @@ agreement").
<tag><label id="proto-pass-to">to "<m/time/"</tag>
Shorthand for setting both <cf/generate to/ and <cf/accept to/.
- <tag><label id="proto-pass-algorithm">algorithm ( keyed md5 | keyed sha1 | hmac sha1 | hmac sha256 | hmac sha384 | hmac sha512 )</tag>
+ <tag><label id="proto-pass-algorithm">algorithm ( keyed md5 | keyed sha1 | hmac sha1 | hmac sha256 | hmac sha384 | hmac sha512 | blake2s128 | blake2s256 | blake2b256 | blake2b512 )</tag>
The message authentication algorithm for the password when cryptographic
authentication is enabled. The default value depends on the protocol.
For RIP and OSPFv2 it is Keyed-MD5 (for compatibility), for OSPFv3