diff options
| author | Pauli <pauli@openssl.org> | 2023-07-07 18:37:08 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2023-07-14 09:51:40 +1000 |
| commit | dfc4b6c93b99f6666cd958c5643a24bb6edff7b7 (patch) | |
| tree | 420038d889e2d9cecaf3b51730a0ec39a1f37c3d /CHANGES.md | |
| parent | 06074ca9aecfc45bdfbf6444468fbf57fc6db4aa (diff) | |
Add a NEWS entry covering the FIPS related changes.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/21386)
Diffstat (limited to 'CHANGES.md')
| -rw-r--r-- | CHANGES.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/CHANGES.md b/CHANGES.md index 2b405ede8d..84f35c7dc4 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -24,7 +24,12 @@ OpenSSL 3.1 ### Changes between 3.1.1 and 3.1.2 [xx XXX xxxx] - * none yet + * When building with the `enable-fips` option and using the resulting + FIPS provider, TLS 1.2 will, by default, mandate the use of an extended + master secret (FIPS 140-3 IG G.Q) and the Hash and HMAC DRBGs will + not operate with truncated digests (FIPS 140-3 IG G.R). + + *Paul Dale* ### Changes between 3.1.0 and 3.1.1 [30 May 2023] |