New option to pkcs12 utility to set alternative MAC digest algorithm.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index f1f3894389de3c123f0523d70f610da1a55d8353..90f29d20111c5cd0ee40c04f62bd11061848dc93 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,21 @@
 
  Changes between 0.9.8b and 0.9.9  [xx XXX xxxx]
 
+  *) New -macalg option to pkcs12 utility to allow setting of an alternative
+     digest MAC.
+     [Steve Henson]
+
+  *) Initial support for PKCS#5 v2.0 PRFs other than default SHA1 HMAC.
+     Reorganize PBE internals to lookup from a static table using NIDs,
+     add support for HMAC PBE OID translation. Add a EVP_CIPHER ctrl:
+     EVP_CTRL_PBE_PRF_NID this allows a cipher to specify an alternative
+     PRF which will be automatically used with PBES2.
+     [Steve Henson]
+
+  *) Replace the algorithm specific calls to generate keys in "req" with the
+     new API.
+     [Steve Henson]
+
   *) Update PKCS#7 enveloped data routines to use new API. This is now
      supported by any public key method supporting the encrypt operation. A
      ctrl is added to allow the public key algorithm to examine or modify