tree af329e4d0cda671b54702f8e20201ba42b7e4c9f
parent d9380b5270afeef00aa5167225ad2771b2bf8c18
author Gilles Peskine <Gilles.Peskine@arm.com> 1621369913 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1621372540 +0200

Rework and reword the guarantees on output_size

To simplify the documentation, and because there are only two realistic
behaviors in practice, only allow two behaviors for multipart output:
immediate output, or buffering of the last partial block.

State some simple rules that applications can follow if they don't care about
the details.

Explicitly state how much output is needed for finish(). Only require the
buffer size to be the size of the actual output, not the size of the potential
output in the worst case. Rename the parameter from output_len to output_size
since it's a buffer size and not necessarily the length of the data.

No longer guarantee that the built-in implementation produces immediate
output.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>