keys/tripe-keys.in: Provide `kx-genalg' and `kx-param-genalg' options.

[tripe] / keys / tripe-keys.conf.5.in

diff --git a/keys/tripe-keys.conf.5.in b/keys/tripe-keys.conf.5.in
index 019fe3b..06ba3e4 100644 (file)
--- a/keys/tripe-keys.conf.5.in
+++ b/keys/tripe-keys.conf.5.in
@@ -141,6 +141,47 @@ or
 .B ec
 (elliptic curves).  The default is
 .BR dh .
+.ne 7
+.TP
+.I kx-genalg
+Key generation algorithm name to pass to
+.B "key add"
+when generating keys.
+Default depends on
+.I kx
+as follows.
+.TS
+center;
+| ci | ci |
+| lb | lb |.
+_
+kx     kx-genalg
+_
+dh     dh
+ec     ec
+_
+.TE
+.ne 7
+.TP
+.I kx-param-genalg
+Key generation algorithm name to pass to
+.B "key add"
+when generating the parameters key.
+Default depends on
+.I kx
+as follows.
+.TS
+center;
+| ci | ci |
+| lb | lb |.
+_
+kx     kx-param-genalg
+_
+dh     dh-param
+ec     ec-param
+_
+.TE
+.ne 7
 .TP
 .I kx-param
 Options to pass to
@@ -184,7 +225,7 @@ This is probably a good choice.
 .TP
 .I cipher
 Symmetric encryption scheme to use.  Default is
-.BR blowfish-cbc .
+.BR rijndael-cbc .
 .TP
 .I sig
 Signature scheme to use.  Must be one of those recognized by
@@ -201,6 +242,7 @@ if
 .I kx
 is
 .BR ec .
+.ne 10
 .TP
 .I sig-genalg
 Key-generation algorithm for signing key.  Default depends on
@@ -221,6 +263,7 @@ ecdsa       ec
 eckcdsa        ec
 _
 .TE
+.ne 8
 .TP
 .I sig-param
 Signature-key generation parameters.  Default depends on