Skip to content

Commit 985d180

Browse files
tniessenjasnell
authored andcommitted
doc: move support for invalid GCM tags to EOL
PR-URL: #17825 Refs: #17523 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com> Reviewed-By: James M Snell <jasnell@gmail.com>
1 parent cf35085 commit 985d180

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

doc/api/deprecations.md

+6-7
Original file line numberDiff line numberDiff line change
@@ -823,14 +823,13 @@ same as the legacy assert but it will always use strict equality checks.
823823
<a id="DEP0090"></a>
824824
### DEP0090: Invalid GCM authentication tag lengths
825825
826-
Type: Runtime
826+
Type: End-of-Life
827827
828-
Node.js supports all GCM authentication tag lengths which are accepted by
829-
OpenSSL when calling [`decipher.setAuthTag()`][]. This behavior will change in
830-
a future version at which point only authentication tag lengths of 128, 120,
831-
112, 104, 96, 64, and 32 bits will be allowed. Authentication tags whose length
832-
is not included in this list will be considered invalid in compliance with
833-
[NIST SP 800-38D][].
828+
Node.js used to support all GCM authentication tag lengths which are accepted by
829+
OpenSSL when calling [`decipher.setAuthTag()`][]. Beginning with node REPLACEME,
830+
only authentication tag lengths of 128, 120, 112, 104, 96, 64, and 32 bits are
831+
allowed. Authentication tags whose length is not included in this list are
832+
considered invalid in compliance with [NIST SP 800-38D][].
834833
835834
<a id="DEP0091"></a>
836835
### DEP0091: crypto.DEFAULT_ENCODING

0 commit comments

Comments
 (0)