X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=70561f7d05e80d66ec7d3e28a14653a0d5550e76;hp=25689404ac4fbf2c92efd29041ea4271acb8b373;hb=2022cfe07e331dc4b69829ca4dd45c295190d471;hpb=d952c79a7b2c1ec4c22c55fdb83d7be963d66b74

diff --git a/CHANGES b/CHANGES
index 25689404ac..70561f7d05 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,13 @@
 
  Changes between 0.9.8f and 0.9.9  [xx XXX xxxx]
 
+  *) Experimental support for use of HMAC via EVP_PKEY interface. This
+     allows HMAC to be handled via the EVP_DigestSign*() interface. The
+     EVP_PKEY "key" in this case is the HMAC key, potentially allowing
+     ENGINE support for HMAC keys which are unextractable. New -mac and
+     -macopt options to dgst utility.
+     [Steve Henson]
+
   *) New option -sigopt to dgst utility. Update dgst to use
      EVP_Digest{Sign,Verify}*. These two changes make it possible to use
      alternative signing paramaters such as X9.31 or PSS in the dgst