diff --git a/doc/age-plugin-batchpass.1 b/doc/age-plugin-batchpass.1 index 03a5dec..ac77e1e 100644 --- a/doc/age-plugin-batchpass.1 +++ b/doc/age-plugin-batchpass.1 @@ -56,10 +56,10 @@ The passphrase to use for encryption or decryption\. Mutually exclusive with \fB A file descriptor number to read the passphrase from\. Trailing newlines are stripped from the file contents\. Mutually exclusive with \fBAGE_PASSPHRASE\fR\. .TP \fBAGE_PASSPHRASE_WORK_FACTOR\fR -The scrypt work factor to use when encrypting\. Must be between 1 and 30\. Default is 18\. Higher values are more secure but slower\. +The scrypt work factor to use when encrypting\. Must be between 1 and 30\. Default is 18\. Higher values are more secure but slower\. The age CLI refuses to decrypt files above 22, and so does this plugin unless \fBAGE_PASSPHRASE_MAX_WORK_FACTOR\fR is set to at least the same value\. .TP \fBAGE_PASSPHRASE_MAX_WORK_FACTOR\fR -The maximum scrypt work factor to accept when decrypting\. Must be between 1 and 30\. Default is 30\. Can be used to avoid very slow decryptions\. +The maximum scrypt work factor to accept when decrypting\. Must be between 1 and 30\. Default is 22\. Can be used to avoid very slow decryptions, or to allow slower ones\. .SH "EXAMPLES" Encrypt a file with a passphrase: .IP "" 4 diff --git a/doc/age-plugin-batchpass.1.html b/doc/age-plugin-batchpass.1.html index 2f24a00..d199f6f 100644 --- a/doc/age-plugin-batchpass.1.html +++ b/doc/age-plugin-batchpass.1.html @@ -140,11 +140,13 @@ persisted in the shell history or leaked to other users on multi-user systems.AGE_PASSPHRASE_WORK_FACTOR
The scrypt work factor to use when encrypting. Must be between 1 and 30. Default is 18. - Higher values are more secure but slower.
+ Higher values are more secure but slower. + The age CLI refuses to decrypt files above 22, and so does this plugin + unless AGE_PASSPHRASE_MAX_WORK_FACTOR is set to at least the same value.
AGE_PASSPHRASE_MAX_WORK_FACTOR
The maximum scrypt work factor to accept when decrypting. - Must be between 1 and 30. Default is 30. - Can be used to avoid very slow decryptions.
+ Must be between 1 and 30. Default is 22. + Can be used to avoid very slow decryptions, or to allow slower ones.

EXAMPLES