diff --git a/website/source/api/secret/transit/index.html.md b/website/source/api/secret/transit/index.html.md index e83cf3cbf155..f0ae62c87619 100644 --- a/website/source/api/secret/transit/index.html.md +++ b/website/source/api/secret/transit/index.html.md @@ -51,14 +51,18 @@ values set here cannot be changed after key creation. - `type` `(string: "aes256-gcm96")` – Specifies the type of key to create. The currently-supported types are: - - `aes256-gcm96` – AES-256 wrapped with GCM using a 96-bit nonce size AEAD + - `aes128-gcm96` – AES-128 wrapped with GCM using a 96-bit nonce size AEAD (symmetric, supports derivation and convergent encryption) + - `aes256-gcm96` – AES-256 wrapped with GCM using a 96-bit nonce size AEAD + (symmetric, supports derivation and convergent encryption, default) - `chacha20-poly1305` – ChaCha20-Poly1305 AEAD (symmetric, supports derivation and convergent encryption) - `ed25519` – ED25519 (asymmetric, supports derivation). When using derivation, a sign operation with the same context will derive the same key and signature; this is a signing analogue to `convergent_encryption`. - `ecdsa-p256` – ECDSA using the P-256 elliptic curve (asymmetric) + - `ecdsa-p384` – ECDSA using the P-384 elliptic curve (asymmetric) + - `ecdsa-p521` – ECDSA using the P-521 elliptic curve (asymmetric) - `rsa-2048` - RSA with bit size of 2048 (asymmetric) - `rsa-4096` - RSA with bit size of 4096 (asymmetric) diff --git a/website/source/docs/secrets/transit/index.html.md b/website/source/docs/secrets/transit/index.html.md index b0bb3c784b1a..20998ded728a 100644 --- a/website/source/docs/secrets/transit/index.html.md +++ b/website/source/docs/secrets/transit/index.html.md @@ -55,13 +55,19 @@ time. As of now, the transit secrets engine supports the following key types (all key types also generate separate HMAC keys): -* `aes256-gcm96`: AES-GCM with a 256-bit AES key and a 96-bit nonce; supports +* `aes128-gcm96`: AES-GCM with a 128-bit AES key and a 96-bit nonce; supports encryption, decryption, key derivation, and convergent encryption +* `aes256-gcm96`: AES-GCM with a 256-bit AES key and a 96-bit nonce; supports + encryption, decryption, key derivation, and convergent encryption (default) * `chacha20-poly1305`: ChaCha20-Poly1305 with a 256-bit key; supports encryption, decryption, key derivation, and convergent encryption * `ed25519`: Ed25519; supports signing, signature verification, and key derivation -* `ecdsa-p256`: ECDSA using curve P256; supports signing and signature +* `ecdsa-p256`: ECDSA using curve P-256; supports signing and signature + verification +* `ecdsa-p384`: ECDSA using curve P-384; supports signing and signature + verification +* `ecdsa-p521`: ECDSA using curve P-521; supports signing and signature verification * `rsa-2048`: 2048-bit RSA key; supports encryption, decryption, signing, and signature verification