diff --git a/Documentation/nvme-check-tls-key.txt b/Documentation/nvme-check-tls-key.txt index 7b2597d0df..51a6f21e30 100644 --- a/Documentation/nvme-check-tls-key.txt +++ b/Documentation/nvme-check-tls-key.txt @@ -65,8 +65,8 @@ OPTIONS -C: --compat: - Use the original algorithm when deriving TLS keys for - compatibility with older implentations. + Use the original non-RFC 8446 compliant algorithm when + checking TLS keys for compatibility with older implentations. -f --keyfile= diff --git a/nvme.c b/nvme.c index 051e239a5d..2e20358144 100644 --- a/nvme.c +++ b/nvme.c @@ -9769,7 +9769,7 @@ static int gen_tls_key(int argc, char **argv, struct command *command, struct pl const char *keytype = "Key type of the retained key."; const char *insert = "Insert retained key into the keyring."; const char *keyfile = "Update key file with the derive TLS PSK."; - const char *compat = "Use compatibility algorithm for HKDF-Expand-Label."; + const char *compat = "Use non-RFC 8446 compliant algorithm for deriving TLS PSK for older implementations"; _cleanup_free_ unsigned char *raw_secret = NULL; _cleanup_free_ char *encoded_key = NULL; @@ -9913,7 +9913,7 @@ static int check_tls_key(int argc, char **argv, struct command *command, struct const char *keytype = "Key type of the retained key."; const char *insert = "Insert retained key into the keyring."; const char *keyfile = "Update key file with the derive TLS PSK."; - const char *compat = "Use compatibility algorithm for HKDF-Expand-Label."; + const char *compat = "Use non-RFC 8446 compliant algorithm for checking TLS PSK for older implementations."; _cleanup_free_ unsigned char *decoded_key = NULL; _cleanup_free_ char *hnqn = NULL;