X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=32f6ff118171fff3ea88f7155fd7597f54f17c6b;hp=f09222f1ca72534d604f37d8f3fdbbc4b76c4a79;hb=a7bd03960c2ebae298e0242422e99bde140386cd;hpb=5765e24f146f21905a8a6e533ca614f84cea45fc

diff --git a/CHANGES b/CHANGES
index f09222f1ca..32f6ff1181 100644
--- a/CHANGES
+++ b/CHANGES
@@ -14,10 +14,9 @@
   *) DES CBC did not update the IV. Weird.
      [Ben Laurie]
 #else
-     Look at des.c, cbc3_enc.c etc.: Those rely on that bevaviour of
-     des_cbc_encrypt and copy IVs themselves when they have to.
-     Either all those have to be changed too, or things must stay as they
-     are.
+     des_cbc_encrypt does not update the IV, but des_ncbc_encrypt does.
+     Changing the behaviour of the former might break existing programs --
+     where IV updating is needed, des_ncbc_encrypt can be used.
 #endif
 
   *) When bntest is run from "make test" it drives bc to check its