Prohibit use of low level digest APIs in FIPS mode.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index e45caddc031b968e121d2c4d649c68ae7b949a65..4702d74f102cd1a200754efe6ea8176d45274141 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,11 @@
 
  Changes between 1.0.0d and 1.0.1  [xx XXX xxxx]
 
+  *) Low level digest APIs are not approved in FIPS mode: any attempt
+     to use these will cause a fatal error. Applications that *really* want
+     to use them can use the private_* version instead.
+     [Steve Henson]
+
   *) Redirect cipher operations to FIPS module for FIPS builds. 
      [Steve Henson]