Fix WIN32 warning.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 4307a998dfed683908d244aff5f1d2f498c3eeb6..29ac9dc182bef2e8ff1f78880d33ad7fd008df3f 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,12 +4,29 @@
 
  Changes between 1.0.1 and 1.1.0  [xx XXX xxxx]
 
+  *) CCM support via EVP. Interface is very similar to GCM case except we
+     must supply all data in one chunk (i.e. no update, final) and the
+     message length must be supplied if AAD is used. Add algorithm test
+     support.
+     [Steve Henson]
+
+  *) Initial version of POST overhaul. Add POST callback to allow the status
+     of POST to be monitored and/or failures induced. Modify fips_test_suite
+     to use callback. Always run all selftests even if one fails.
+     [Steve Henson]
+
+  *) XTS support including algorithm test driver in the fips_gcmtest program.
+     Note: this does increase the maximum key length from 32 to 64 bytes but
+     there should be no binary compatibility issues as existing applications
+     will never use XTS mode.
+     [Steve Henson]
+
   *) Extensive reorganisation of FIPS PRNG behaviour. Remove all dependencies
      to OpenSSL RAND code and replace with a tiny FIPS RAND API which also
      performs algorithm blocking for unapproved PRNG types. Also do not
      set PRNG type in FIPS_mode_set(): leave this to the application.
      Add default OpenSSL DRBG handling: sets up FIPS PRNG and seeds with
-     the standard OpenSSL PRNG.
+     the standard OpenSSL PRNG: set additional data to a date time vector.
      [Steve Henson]
 
   *) Rename old X9.31 PRNG functions of the form FIPS_rand* to FIPS_x931*.