des_cbc_encrypt / des_ncbc_encrypt issue.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 92706e585035dba321958e89b24dbe219b0acf34..32f6ff118171fff3ea88f7155fd7597f54f17c6b 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -10,8 +10,14 @@
      according to Mark Crispin <MRC@Panda.COM>.
      [Bodo Moeller]
 
+#if 0
   *) DES CBC did not update the IV. Weird.
      [Ben Laurie]
+#else
+     des_cbc_encrypt does not update the IV, but des_ncbc_encrypt does.
+     Changing the behaviour of the former might break existing programs --
+     where IV updating is needed, des_ncbc_encrypt can be used.
+#endif
 
   *) When bntest is run from "make test" it drives bc to check its
      calculations, as well as internally checking them. If an internal check