Add missing variable length cipher flag for Blowfish.

[oweals/openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index a3292d244d8b2c75698407c39aaab63f221ddeac..73bc3479c807f4a78f888d1eac4ef538f3b98620 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -11,6 +11,16 @@
          *) applies to 0.9.6a (/0.9.6b) and 0.9.7
          +) applies to 0.9.7 only
 
+  *) Fix for compatibility mode trust settings: ignore trust settings
+     unless some valid trust or reject settings are present.
+     [Steve Henson]
+
+  *) Fix for blowfish EVP: its a variable length cipher.
+     [Steve Henson]
+
+  +) Increase ENTROPY_NEEDED to 32 bytes, as Rijndael can operate with
+     256 bit (=32 byte) keys. Of course seeding with more entropy bytes
+     than this minimum value is recommended.
 
   +) New random seeder for OpenVMS, using the system process statistics
      that are easily reachable.
@@ -94,7 +104,7 @@
      ENGINE structure.
      [Geoff]
 
-  +) Fix various bugs related to DSA S/MIME verification. Handle missing
+  *) Fix various bugs related to DSA S/MIME verification. Handle missing
      parameters in DSA public key structures and return an error in the
      DSA routines if parameters are absent.
      [Steve Henson]