@@ -807,6 +807,18 @@ Importing assert directly is not recommended as the exposed functions will use
807
807
loose equality checks. Use `require(' assert' ).strict` instead. The API is the
808
808
same as the legacy assert but it will always use strict equality checks.
809
809
810
+ <a id="DEP0090"></a>
811
+ ### DEP0090: Invalid GCM authentication tag lengths
812
+
813
+ Type: Runtime
814
+
815
+ Node.js supports all GCM authentication tag lengths which are accepted by
816
+ OpenSSL when calling [`decipher.setAuthTag()`][]. This behavior will change in
817
+ a future version at which point only authentication tag lengths of 128, 120,
818
+ 112, 104, 96, 64, and 32 bits will be allowed. Authentication tags whose length
819
+ is not included in this list will be considered invalid in compliance with
820
+ [NIST SP 800-38D][].
821
+
810
822
[`Buffer.allocUnsafeSlow(size)`]: buffer.html#buffer_class_method_buffer_allocunsafeslow_size
811
823
[`Buffer.from(array)`]: buffer.html#buffer_class_method_buffer_from_array
812
824
[`Buffer.from(buffer)`]: buffer.html#buffer_class_method_buffer_from_buffer
@@ -821,6 +833,7 @@ same as the legacy assert but it will always use strict equality checks.
821
833
[`console.log()`]: console.html#console_console_log_data_args
822
834
[`crypto.createCredentials()`]: crypto.html#crypto_crypto_createcredentials_details
823
835
[`crypto.pbkdf2()`]: crypto.html#crypto_crypto_pbkdf2_password_salt_iterations_keylen_digest_callback
836
+ [`decipher.setAuthTag()`]: crypto.html#crypto_decipher_setauthtag_buffer
824
837
[`domain`]: domain.html
825
838
[`ecdh.setPublicKey()`]: crypto.html#crypto_ecdh_setpublickey_publickey_encoding
826
839
[`emitter.listenerCount(eventName)`]: events.html#events_emitter_listenercount_eventname
@@ -871,4 +884,5 @@ same as the legacy assert but it will always use strict equality checks.
871
884
[alloc_unsafe_size]: buffer.html#buffer_class_method_buffer_allocunsafe_size
872
885
[from_arraybuffer]: buffer.html#buffer_class_method_buffer_from_arraybuffer_byteoffset_length
873
886
[from_string_encoding]: buffer.html#buffer_class_method_buffer_from_string_encoding
887
+ [NIST SP 800-38D]: http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf
874
888
[`REPLServer.clearBufferedCommand()`]: repl.html#repl_replserver_clearbufferedcommand
0 commit comments