From a899ce4ba4c404d342bf892b8b756b66fc65d6b5 Mon Sep 17 00:00:00 2001
From: John Baldwin <jhb@FreeBSD.org>
Date: Wed, 3 Mar 2021 15:17:37 -0800
Subject: [PATCH] The ChaCha20 counter is little endian, not big endian.

Reviewed by:	cem
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D28755
---
 share/man/man7/crypto.7 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/share/man/man7/crypto.7 b/share/man/man7/crypto.7
index ccc2d1fc9be..6e5bd83621a 100644
--- a/share/man/man7/crypto.7
+++ b/share/man/man7/crypto.7
@@ -27,7 +27,7 @@
 .\"
 .\" $FreeBSD$
 .\"
-.Dd February 18, 2021
+.Dd March 3, 2021
 .Dt CRYPTO 7
 .Os
 .Sh NAME
@@ -136,7 +136,7 @@ counter rollover.
 .Dv CRYPTO_CHACHA20
 accepts a 16 byte IV.
 The first 8 bytes are used as a nonce.
-The last 8 bytes are used as 64-bit big-endian block counter.
+The last 8 bytes are used as a 64-bit little-endian block counter.
 .Ss Authenticated Encryption with Associated Data Algorithms
 AEAD algorithms in OCF combine a stream cipher with an authentication
 algorithm to provide both secrecy and authentication.