tree dab80226698e4e81f3d1a4a385028e931c3c08e3
parent 4f57074bfa54b48122fa725627bdbd947fbbbca1
author David Benjamin <davidben@google.com> 1481737262 -0500
committer Adam Langley <agl@google.com> 1481908658 +0000

Fix RSA-PSS documentation.

-2 is really weird. On sign, it's maximal length. On verify, it actually
accepts all lengths. This sounds somewhat questionable to me, but just
document the state of the world for now. Also add a recommendation to
use -1 (match digest length) to align with TLS 1.3, tokbind, and QUIC
Crypto. Hopefully the first two is sufficient that the IETF will forever
use this option and stop the proliferation of RSA-PSS parameters.

Change-Id: Ie0ad7ad451089df0e18d6413d1b21c5aaad9d0f2
Reviewed-on: https://boringssl-review.googlesource.com/12823
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>