Since
13b8fbf4548f3457b02afd36e9284d39839d6f85
sig: Move hashing into algorithm
new public key internal APIs use this rather differently.
So far the difference has been nugatory, because there's only rsa1.
But we should change the documentation.
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
key (rsapubkey closure): our peer's public key (obsolete)
transform (transform closure): how to mangle packets sent between sites
dh (dh closure)
- hash (hash closure)
+ hash (hash closure): used for keys whose algorithm (or public
+ or private key file) does not imply the hash function
key-lifetime (integer): max lifetime of a session key, in ms
[one hour; mobile: 2 days]
setup-retries (integer): max number of times to transmit a key negotiation