Change default RSA, DSA and DH size to 2048 bit

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index d0e2d3a6c9fca0fbbd067dc68b8221f1f851cb51..86da7f1b1b5e34a624db252bf8a0b059a1371222 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,18 @@
 
  Changes between 1.1.1 and 3.0.0 [xx XXX xxxx]
 
+  *) Change the default RSA, DSA and DH size to 2048 bit instead of 1024.
+     This changes the size when using the genpkey app when no size is given. It
+     fixes an omission in earlier changes that changed all RSA, DSA and DH
+     generation apps to use 2048 bits by default.
+     [Kurt Roeckx]
+
+  *) Added command 'openssl kdf' that uses the EVP_KDF API.
+     [Shane Lontis]
+
+   *) Added command 'openssl mac' that uses the EVP_MAC API.
+     [Shane Lontis]
+
   *) Added OPENSSL_info() to get diverse built-in OpenSSL data, such
      as default directories.  Also added the command 'openssl info'
      for scripting purposes.