Correct description of the ECDH shared secret
The endianness actually depends on the curve type.
Correct the terminology around "curve size" and "order of the curve".
I tried to find a formulation that is comprehensible to programmers
who do not know the underlying mathematics, but nonetheless correct
and precise.
Use similar terminology in other places that were using "order of the
curve" to describe the bit size associated with the curve.
diff --git a/include/psa/crypto_sizes.h b/include/psa/crypto_sizes.h
index edddca4..f4feb4d 100644
--- a/include/psa/crypto_sizes.h
+++ b/include/psa/crypto_sizes.h
@@ -422,9 +422,10 @@
* parameters OBJECT IDENTIFIER } -- namedCurve
* ECPoint ::= ...
* -- first 8 bits: 0x04;
- * -- then x_P as an n-bit string, big endian;
- * -- then y_P as a n-bit string, big endian,
- * -- where n is the order of the curve.
+ * -- then x_P as a `ceiling(n/8)`-byte string, big endian;
+ * -- then y_P as a `ceiling(n/8)`-byte string, big endian;
+ * -- where `n` is the bit size associated with the curve,
+ * -- i.e. the bit size of `q` for a curve over `F_q`.
*
* - 2 * 4 bytes of SEQUENCE overhead;
* - 1 + 1 + 7 bytes of algorithm (id-ecPublicKey OID);