The docs for the secret object type specified the wrong number of bytes for the AES initialization vector.
Signed-off-by: Daniel P. Berrange <berra...@redhat.com> --- qemu-options.hx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qemu-options.hx b/qemu-options.hx index 789d9f6..587de8f 100644 --- a/qemu-options.hx +++ b/qemu-options.hx @@ -3888,7 +3888,7 @@ parameter provides the ID of a previously defined secret that contains the AES-256 decryption key. This key should be 32-bytes long and be base64 encoded. The @var{iv} parameter provides the random initialization vector used for encryption of this particular secret and should be a -base64 encrypted string of the 32-byte IV. +base64 encrypted string of the 16-byte IV. The simplest (insecure) usage is to provide the secret inline -- 2.5.5