New -mac and -macopt options to dgst utility. Reimplement -hmac option in

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 25689404ac4fbf2c92efd29041ea4271acb8b373..70561f7d05e80d66ec7d3e28a14653a0d5550e76 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,13 @@
 
  Changes between 0.9.8f and 0.9.9  [xx XXX xxxx]
 
 
  Changes between 0.9.8f and 0.9.9  [xx XXX xxxx]
 

+  *) Experimental support for use of HMAC via EVP_PKEY interface. This
+     allows HMAC to be handled via the EVP_DigestSign*() interface. The
+     EVP_PKEY "key" in this case is the HMAC key, potentially allowing
+     ENGINE support for HMAC keys which are unextractable. New -mac and
+     -macopt options to dgst utility.
+     [Steve Henson]
+

   *) New option -sigopt to dgst utility. Update dgst to use
      EVP_Digest{Sign,Verify}*. These two changes make it possible to use
      alternative signing paramaters such as X9.31 or PSS in the dgst 
   *) New option -sigopt to dgst utility. Update dgst to use
      EVP_Digest{Sign,Verify}*. These two changes make it possible to use
      alternative signing paramaters such as X9.31 or PSS in the dgst