X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=CHANGES;h=7ff2ec42994b7ed2f205dd0032ff67ecc53ba25c;hp=03b2c5a61991a157726e17410a86401e30d6e863;hb=8bae7722a24a47d813fcdafebdaee7f0c23d7981;hpb=5f09d0ecc2ad6b7b90e358460ef82d17ae2abb15

diff --git a/CHANGES b/CHANGES
index 03b2c5a619..7ff2ec4299 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,15 @@
 
  Changes between 0.9.8f and 0.9.9  [xx XXX xxxx]
 
+  *) Final changes to avoid use of pointer pointer casts in OpenSSL.
+     OpenSSL should now compile cleanly on gcc 4.2
+     [Peter Hartley <pdh@utter.chaos.org.uk>, Steve Henson]
+
+  *) Update SSL library to use new EVP_PKEY MAC API. Include generic MAC
+     support including streaming MAC support: this is required for GOST
+     ciphersuite support.
+     [Victor B. Wagner <vitus@cryptocom.ru>, Steve Henson]
+
   *) Add option -stream to use PKCS#7 streaming in smime utility. New
      function i2d_PKCS7_bio_stream() and PEM_write_PKCS7_bio_stream()
      to output in BER and PEM format.
@@ -88,10 +97,10 @@
      [Nils Larsch]
 
   *) Initial incomplete changes to avoid need for function casts in OpenSSL
-     when OPENSSL_NO_FCAST is set: some compilers (gcc 4.2 and later) reject
-     their use. Safestack is reimplemented using inline functions: tests show
-     that these calls are typically optimized away by compilers so they have
-     no additional overhead. Update ASN1 to avoid use of legacy functions. 
+     some compilers (gcc 4.2 and later) reject their use. Safestack is
+     reimplemented using inline functions: tests show that these calls are
+     typically optimized away by compilers so they have no additional overhead.
+     Update ASN1 to avoid use of legacy functions. 
      [Steve Henson]
 
   *) Win32/64 targets are linked with Winsock2.
@@ -501,6 +510,16 @@
 
  Changes between 0.9.8e and 0.9.8f  [xx XXX xxxx]
 
+  *) Mitigate attack on final subtraction in Montgomery reduction.
+     [Andy Polyakov]
+
+  *) Fix crypto/ec/ec_mult.c to work properly with scalars of value 0
+     (which previously caused an internal error).
+     [Bodo Moeller]
+
+  *) Squeeze another 10% out of IGE mode when in != out.
+     [Ben Laurie]
+
   *) AES IGE mode speedup.
      [Dean Gaudet (Google)]