Allow user-specified symmetric crypto algorithms.

[tripe] / doc / tripe.8

diff --git a/doc/tripe.8 b/doc/tripe.8
index b6da8d814a32d3bfbca123203f0cf0932eaccca6..929f01910788c52fcbdbcfe68aa030880eedde6d 100644 (file)
--- a/doc/tripe.8
+++ b/doc/tripe.8
@@ -444,6 +444,34 @@ Now start
 with the
 .B \-ttripe\-ec
 option, and all should be well.
+.SS "Using other symmetric algorithms"
+The default symmetric algorithms
+.B tripe
+uses are Blowfish (by Schneier) for symmetric encryption, and RIPEMD-160
+(by Dobbertin, Bosselaers and Preneel) for hashing and as a MAC (in HMAC
+mode, designed by Bellare, Canetti and Krawczyk).  These can all be
+overridden by setting attributes on your private key, as follows.
+.TP
+.B cipher
+Names the symmetric encryption scheme to use.  The default is
+.BR blowfish\-cbc .
+.TP
+.B hash
+Names the hash function to use.  The default is
+.BR rmd160 .
+.TP
+.B mac
+Names the message authentication code to use.  The name of the MAC may
+be followed by a
+.RB ` / '
+and the desired tag length in bits.  The default is
+.IB hash \-hmac
+at half the underlying hash function's output length.
+.TP
+.B mgf
+A `mask-generation function', used in the key-exchange.  The default is
+.IB hash \-mgf
+and there's no good reason to change it.
 .SS "About the name"
 The program's name is
 .BR tripe ,