des_cbc_encrypt / des_ncbc_encrypt issue.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index a4ae465508f3c000fb96bb84690fbe04ed0c0967..32f6ff118171fff3ea88f7155fd7597f54f17c6b 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,20 @@
 
  Changes between 0.9.3a and 0.9.4
 
+  *) Add to configuration table a new entry that can specify an alternative
+     name for unistd.h (for pre-POSIX systems); we need this for NeXTstep,
+     according to Mark Crispin <MRC@Panda.COM>.
+     [Bodo Moeller]
+
+#if 0
+  *) DES CBC did not update the IV. Weird.
+     [Ben Laurie]
+#else
+     des_cbc_encrypt does not update the IV, but des_ncbc_encrypt does.
+     Changing the behaviour of the former might break existing programs --
+     where IV updating is needed, des_ncbc_encrypt can be used.
+#endif
+
   *) When bntest is run from "make test" it drives bc to check its
      calculations, as well as internally checking them. If an internal check
      fails, it needs to cause bc to give a non-zero result or make test carries
@@ -24,6 +38,7 @@
 
   *) Instead of "mkdir -p", which is not fully portable, use new
      Perl script "util/mkdir-p.pl".
+     [Bodo Moeller]
 
   *) Rewrite the way password based encryption (PBE) is handled. It used to
      assume that the ASN1 AlgorithmIdentifier parameter was a PBEParameter