浏览代码

tls: small extensions in parameter docs related to PRNG engines

Henning Westerholt 6 年之前
父节点
当前提交
4162eed873
共有 1 个文件被更改,包括 3 次插入3 次删除
  1. 3 3
      src/modules/tls/doc/params.xml

+ 3 - 3
src/modules/tls/doc/params.xml

@@ -1258,14 +1258,14 @@ end
 	</para>
 	<itemizedlist>
 		<listitem><para>krand - use internal kam_rand() function</para></listitem>
-		<listitem><para>fastrand - use internal fastrand function</para></listitem>
-		<listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem>
+		<listitem><para>fastrand - use internal fastrand (ISAAC) function</para></listitem>
+		<listitem><para>cryptorand - use internal cryptorand (Fortuna) function</para></listitem>
 		<listitem><para>kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex</para></listitem>
 	</itemizedlist>
 	<para>
 		Note: the krand and fastrand engines are not recommended for use on
 		systems requiring strong security, as they may not generate numbers
-		with enough randomness.
+		with enough randomness and are not cryptographically secure.
 	</para>
 	<para>
 		The default value is empty (not set) for libssl v1.0.x or older, and