Prototypes for more FIPS functions for use in FIPS capable OpenSSL.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index ff8201a9a1c9337a77812ca5ad881145b7227c8a..1633d27975c91f122c4e9266b2c3cf4e56e8ffbf 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,20 @@
 
  Changes between 1.0.1 and 1.1.0  [xx XXX xxxx]
 
+  *) Add protection against ECDSA timing attacks as mentioned in the paper
+     by Billy Bob Brumley and Nicola Tuveri, see:
+
+       http://eprint.iacr.org/2011/232.pdf
+
+     [Billy Bob Brumley and Nicola Tuveri]
+
+  *) Add TLS v1.2 server support for client authentication. 
+     [Steve Henson]
+
+  *) Add support for FIPS mode in ssl library: disable SSLv3, non-FIPS ciphers
+     and enable MD5.
+     [Steve Henson]
+
   *) Functions FIPS_mode_set() and FIPS_mode() which call the underlying
      FIPS modules versions.
      [Steve Henson]