Document DSA and SHA.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 210a48ecfd632de0686d22b225febfc7ebd0b8dd..6ef0317f98bccecdf464d123cb9f95fa89b3a0e0 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,13 +2,30 @@
  OpenSSL CHANGES
  _______________
 
- Changes between 0.9.4 and 0.9.5  [xx XXX 1999]
+ Changes between 0.9.4 and 0.9.5  [xx XXX 2000]
 
-  *) RAND_load_file(..., -1) reads the complete file and uses it to
-     seed the PRNG (previously an explicit byte count was required).
-     The bytes obtained by stat() are no longer counted for the
-     return value.
-     [Bodo Möller, Ulf Möller]
+  *) Use BN_prime_checks_size(BN_num_bits(w)) rounds of Miller-Rabin when
+     generating DSA primes.
+     [Ulf Möller]
+
+  *) New function BN_pseudo_rand().
+     [Ulf Möller]
+
+  *) Clean up BN_mod_mul_montgomery(): replace the broken (and unreadable)
+     bignum version of BN_from_montgomery() with the working code from
+     SSLeay 0.9.0 (the word based version is faster anyway), and clean up
+     the comments.
+     [Ulf Möller]
+
+  *) Avoid a race condition in s2_clnt.c (function get_server_hello) that
+     made it impossible to use the same SSL_SESSION data structure in
+     SSL2 clients in multiple threads.
+     [Bodo Moeller]
+
+  *) The return value of RAND_load_file() no longer counts bytes obtained
+     by stat().  RAND_load_file(..., -1) is new and uses the complete file
+     to seed the PRNG (previously an explicit byte count was required).
+     [Ulf Möller, Bodo Möller]
 
   *) Clean up CRYPTO_EX_DATA functions, some of these didn't have prototypes
      used (char *) instead of (void *) and had casts all over the place.