Browse Source

tls: small extensions in parameter docs related to PRNG engines

Henning Westerholt 6 years ago
parent
commit
4162eed873
1 changed files with 3 additions and 3 deletions
  1. 3 3
      src/modules/tls/doc/params.xml

+ 3 - 3
src/modules/tls/doc/params.xml

@@ -1258,14 +1258,14 @@ end
 	</para>
 	</para>
 	<itemizedlist>
 	<itemizedlist>
 		<listitem><para>krand - use internal kam_rand() function</para></listitem>
 		<listitem><para>krand - use internal kam_rand() function</para></listitem>
-		<listitem><para>fastrand - use internal fastrand function</para></listitem>
-		<listitem><para>cryptorand - use internal cryptorand (fortuna) function</para></listitem>
+		<listitem><para>fastrand - use internal fastrand (ISAAC) function</para></listitem>
+		<listitem><para>cryptorand - use internal cryptorand (Fortuna) function</para></listitem>
 		<listitem><para>kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex</para></listitem>
 		<listitem><para>kxlibssl - default libssl rand engine wrapped by a &kamailio; mutex</para></listitem>
 	</itemizedlist>
 	</itemizedlist>
 	<para>
 	<para>
 		Note: the krand and fastrand engines are not recommended for use on
 		Note: the krand and fastrand engines are not recommended for use on
 		systems requiring strong security, as they may not generate numbers
 		systems requiring strong security, as they may not generate numbers
-		with enough randomness.
+		with enough randomness and are not cryptographically secure.
 	</para>
 	</para>
 	<para>
 	<para>
 		The default value is empty (not set) for libssl v1.0.x or older, and
 		The default value is empty (not set) for libssl v1.0.x or older, and