EVP_*Update: ensure that input NULL with length 0 isn't passed

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index d977c7665653021d82525d49f8272d79001306b0..e70e42b5706f82ae02b22fdc458b6ae9e3c49935 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -9,9 +9,31 @@
 
  Changes between 1.1.1 and 3.0.0 [xx XXX xxxx]
 
 
  Changes between 1.1.1 and 3.0.0 [xx XXX xxxx]
 

-  *) Added support for enabling instrumentation through trace output.
-     This is left to application control, by allowing it to register BIOs as
-     channels for a number of tracing and debugging categories.
+  *) Limit the number of blocks in a data unit for AES-XTS to 2^20 as
+     mandated by IEEE Std 1619-2018.
+
+  *) Added newline escaping functionality to a filename when using openssl dgst.
+     This output format is to replicate the output format found in the '*sum'
+     checksum programs. This aims to preserve backward compatibility.
+     [Matt Eaton, Richard Levitte, and Paul Dale]
+
+  *) Removed the heartbeat message in DTLS feature, as it has very
+     little usage and doesn't seem to fulfill a valuable purpose.
+     The configuration option is now deprecated.
+     [Richard Levitte]
+
+  *) Changed the output of 'openssl {digestname} < file' to display the
+     digest name in its output.
+     [Richard Levitte]
+
+  *) Added a new generic trace API which provides support for enabling
+     instrumentation through trace output. This feature is mainly intended
+     as an aid for developers and is disabled by default. To utilize it,
+     OpenSSL needs to be configured with the `enable-trace` option.
+
+     If the tracing API is enabled, the application can activate trace output
+     by registering BIOs as trace channels for a number of tracing and debugging
+     categories.

 
      The 'openssl' application has been expanded to enable any of the types
      available via environment variables defined by the user, and serves as
 
      The 'openssl' application has been expanded to enable any of the types
      available via environment variables defined by the user, and serves as


@@ -26,6 +48,12 @@
      'enable-buildtest-c++'.
      [Richard Levitte]
 
      'enable-buildtest-c++'.
      [Richard Levitte]
 

+  *) Add Single Step KDF (EVP_KDF_SS) to EVP_KDF.
+     [Shane Lontis]
+
+  *) Add KMAC to EVP_MAC.
+     [Shane Lontis]
+

   *) Added property based algorithm implementation selection framework to
      the core.
      [Paul Dale]
   *) Added property based algorithm implementation selection framework to
      the core.
      [Paul Dale]