Update transit docs to add aes128/p384/p521 information (#7718)

hashicorp · Oct 23, 2019 · ae74140 · ae74140
1 parent b3a2ab5
commit ae74140
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 3 deletions.
diff --git a/website/source/api/secret/transit/index.html.md b/website/source/api/secret/transit/index.html.md
@@ -51,14 +51,18 @@ values set here cannot be changed after key creation.
 - `type` `(string: "aes256-gcm96")` – Specifies the type of key to create. The
   currently-supported types are:
 
-    - `aes256-gcm96` – AES-256 wrapped with GCM using a 96-bit nonce size AEAD
+    - `aes128-gcm96` – AES-128 wrapped with GCM using a 96-bit nonce size AEAD
       (symmetric, supports derivation and convergent encryption)
+    - `aes256-gcm96` – AES-256 wrapped with GCM using a 96-bit nonce size AEAD
+      (symmetric, supports derivation and convergent encryption, default)
     - `chacha20-poly1305` – ChaCha20-Poly1305 AEAD (symmetric, supports
       derivation and convergent encryption)
     - `ed25519` – ED25519 (asymmetric, supports derivation). When using
       derivation, a sign operation with the same context will derive the same
       key and signature; this is a signing analogue to `convergent_encryption`.
     - `ecdsa-p256` – ECDSA using the P-256 elliptic curve (asymmetric)
+    - `ecdsa-p384` – ECDSA using the P-384 elliptic curve (asymmetric)
+    - `ecdsa-p521` – ECDSA using the P-521 elliptic curve (asymmetric)
     - `rsa-2048` - RSA with bit size of 2048 (asymmetric)
     - `rsa-4096` - RSA with bit size of 4096 (asymmetric)
 

diff --git a/website/source/docs/secrets/transit/index.html.md b/website/source/docs/secrets/transit/index.html.md
@@ -55,13 +55,19 @@ time.
 As of now, the transit secrets engine supports the following key types (all key
 types also generate separate HMAC keys):
 
-* `aes256-gcm96`: AES-GCM with a 256-bit AES key and a 96-bit nonce; supports
+* `aes128-gcm96`: AES-GCM with a 128-bit AES key and a 96-bit nonce; supports
   encryption, decryption, key derivation, and convergent encryption
+* `aes256-gcm96`: AES-GCM with a 256-bit AES key and a 96-bit nonce; supports
+  encryption, decryption, key derivation, and convergent encryption (default)
 * `chacha20-poly1305`: ChaCha20-Poly1305 with a 256-bit key; supports
   encryption, decryption, key derivation, and convergent encryption
 * `ed25519`: Ed25519; supports signing, signature verification, and key
   derivation
-* `ecdsa-p256`: ECDSA using curve P256; supports signing and signature
+* `ecdsa-p256`: ECDSA using curve P-256; supports signing and signature
+  verification
+* `ecdsa-p384`: ECDSA using curve P-384; supports signing and signature
+  verification
+* `ecdsa-p521`: ECDSA using curve P-521; supports signing and signature
   verification
 * `rsa-2048`: 2048-bit RSA key; supports encryption, decryption, signing, and
   signature verification