@@ -807,6 +807,18 @@ Importing assert directly is not recommended as the exposed functions will use
807807loose equality checks. Use `require('  assert' ).strict` instead. The API is the
808808same as the legacy assert but it will always use strict equality checks. 
809809
810+ <a id="DEP0090"></a> 
811+ ### DEP0090: Invalid GCM authentication tag lengths 
812+ 
813+ Type: Runtime 
814+ 
815+ Node.js supports all GCM authentication tag lengths which are accepted by 
816+ OpenSSL when calling [`decipher.setAuthTag()`][]. This behavior will change in 
817+ a future version at which point only authentication tag lengths of 128, 120, 
818+ 112, 104, 96, 64, and 32 bits will be allowed. Authentication tags whose length 
819+ is not included in this list will be considered invalid in compliance with 
820+ [NIST SP 800-38D][]. 
821+ 
810822[`Buffer.allocUnsafeSlow(size)`]: buffer.html#buffer_class_method_buffer_allocunsafeslow_size 
811823[`Buffer.from(array)`]: buffer.html#buffer_class_method_buffer_from_array 
812824[`Buffer.from(buffer)`]: buffer.html#buffer_class_method_buffer_from_buffer 
@@ -821,6 +833,7 @@ same as the legacy assert but it will always use strict equality checks.
821833[`console.log()`]: console.html#console_console_log_data_args 
822834[`crypto.createCredentials()`]: crypto.html#crypto_crypto_createcredentials_details 
823835[`crypto.pbkdf2()`]: crypto.html#crypto_crypto_pbkdf2_password_salt_iterations_keylen_digest_callback 
836+ [`decipher.setAuthTag()`]: crypto.html#crypto_decipher_setauthtag_buffer 
824837[`domain`]: domain.html 
825838[`ecdh.setPublicKey()`]: crypto.html#crypto_ecdh_setpublickey_publickey_encoding 
826839[`emitter.listenerCount(eventName)`]: events.html#events_emitter_listenercount_eventname 
@@ -871,4 +884,5 @@ same as the legacy assert but it will always use strict equality checks.
871884[alloc_unsafe_size]: buffer.html#buffer_class_method_buffer_allocunsafe_size 
872885[from_arraybuffer]: buffer.html#buffer_class_method_buffer_from_arraybuffer_byteoffset_length 
873886[from_string_encoding]: buffer.html#buffer_class_method_buffer_from_string_encoding 
887+ [NIST SP 800-38D]: http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf 
874888[`REPLServer.clearBufferedCommand()`]: repl.html#repl_replserver_clearbufferedcommand 
0 commit comments