Updates to handle some verification of v2 tests.

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 8fa3e5436625695cc87d0350c6f6f6b48abb84b2..b538085098fdb0e687e0550a77ea3c303f7d4ab3 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,20 @@
 
  Changes between 1.0.1 and 1.1.0  [xx XXX xxxx]
 
+  *) Add FIPS selftest for ECDH algorithm using P-224 and B-233 curves.
+     [Steve Henson]
+
+  *) Use separate DRBG fields for internal and external flags. New function
+     FIPS_drbg_health_check() to perform on demand health checking. Add
+     generation tests to fips_test_suite with reduced health check interval to 
+     demonstrate periodic health checking. Add "nodh" option to
+     fips_test_suite to skip very slow DH test.
+     [Steve Henson]
+
+  *) New function FIPS_get_cipherbynid() to lookup FIPS supported ciphers
+     based on NID.
+     [Steve Henson]
+
   *) More extensive health check for DRBG checking many more failure modes.
      New function FIPS_selftest_drbg_all() to handle every possible DRBG
      combination: call this in fips_test_suite.
@@ -242,8 +256,8 @@
      multi-process servers.
      [Steve Henson]
 
-  *) Experiemental password based recipient info support for CMS library:
-     implementing RFC3211.
+  *) Password based recipient info support for CMS library: implementing
+     RFC3211.
      [Steve Henson]
 
   *) Split password based encryption into PBES2 and PBKDF2 functions. This