The MAC tag length is actually optional, so show this in the
description.
program uses the Catacomb keyring format to store its cryptographic
keys: see
.BR keyring (5)
-for the technical details. Keys maybe generated and managed using the
+for the technical details. Keys may be generated and managed using the
.BR key (1)
utility.
.PP
.B mac
The message authentication code used to ensure the integrity of the
ciphertext, in the form
-.IB name / tagbits \fR.
-The default is to use HMAC with the chosen hash function, and truncate
+.IB name\fR[ / tagbits \fR].
+The defaults are to use HMAC with the chosen hash function, and truncate
the tag to half of its original length.
.PP
Key fragments must contain only plain binary data: you can generate one