Make "make test" fail if bntest fails an internal selfcheck.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index a10452407763278304a2a40f50175d533881c633..a4ae465508f3c000fb96bb84690fbe04ed0c0967 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,23 @@
 
  Changes between 0.9.3a and 0.9.4
 
+  *) When bntest is run from "make test" it drives bc to check its
+     calculations, as well as internally checking them. If an internal check
+     fails, it needs to cause bc to give a non-zero result or make test carries
+     on without noticing the failure. Fixed.
+     [Ben Laurie]
+
+  *) DES library cleanups.
+     [Ulf Möller]
+
+  *) Add support for PKCS#5 v2.0 PBE algorithms. This will permit PKCS#8 to be
+     used with any cipher unlike PKCS#5 v1.5 which can at most handle 64 bit
+     ciphers. NOTE: although the key derivation function has been verified
+     against some published test vectors it has not been extensively tested
+     yet. Added a -v2 "cipher" option to pkcs8 application to allow the use
+     of v2.0.
+     [Steve Henson]
+
   *) Instead of "mkdir -p", which is not fully portable, use new
      Perl script "util/mkdir-p.pl".