Clarify docs.

This commit is contained in:
Dr. Stephen Henson 1999-11-16 02:51:41 +00:00
parent fd699ac55f
commit 6d1b637ba1

View File

@ -119,8 +119,9 @@ B<openssl enc -ciphername>.
A password will be prompted for to derive the key and IV if necessary.
The B<-salt> option should B<ALWAYS> be used unless you want compatability
with previous versions of OpenSSL and SSLeay.
The B<-salt> option should B<ALWAYS> be used if the key is being derived
from a password unless you want compatability with previous versions of
OpenSSL and SSLeay.
Without the B<-salt> option it is possible to perform efficient dictionary
attacks on the password and to attack stream cipher encrypted data. The reason