From 622d05b1a2ddca87671226f1402c2d68071c2bab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tobias=20Nie=C3=9Fen?= Date: Thu, 11 Jul 2024 15:40:39 +0200 Subject: [PATCH] doc: clarify authenticity of plaintexts in update PR-URL: https://github.com/nodejs/node/pull/53784 Reviewed-By: Filip Skokan Reviewed-By: James M Snell Reviewed-By: Marco Ippolito --- doc/api/crypto.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/doc/api/crypto.md b/doc/api/crypto.md index f68fc5637b982f..b68063723da8b9 100644 --- a/doc/api/crypto.md +++ b/doc/api/crypto.md @@ -980,6 +980,11 @@ The `decipher.update()` method can be called multiple times with new data until [`decipher.final()`][] is called. Calling `decipher.update()` after [`decipher.final()`][] will result in an error being thrown. +Even if the underlying cipher implements authentication, the authenticity and +integrity of the plaintext returned from this function may be uncertain at this +time. For authenticated encryption algorithms, authenticity is generally only +established when the application calls [`decipher.final()`][]. + ## Class: `DiffieHellman`