From: Kurt Roeckx <kurt@roeckx.be>
Date: Sat, 7 Jul 2018 08:55:18 +0000 (+0200)
Subject: Update DRBG CHANGES section
X-Git-Tag: OpenSSL_1_1_1-pre9~182
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=68b3cbd448e096bf3954d30de058d18615f9c257;p=oweals%2Fopenssl.git

Update DRBG CHANGES section

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
GH: #6666
---

diff --git a/CHANGES b/CHANGES
index 2eb90a9234..4765e0b14a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -196,12 +196,12 @@
 
      Some of its new features are:
       o Support for multiple DRBG instances with seed chaining.
-      o Add a public DRBG instance for the default RAND method.
-      o Add a dedicated DRBG instance for generating long term private keys.
-      o Make the DRBG instances fork-safe.
+      o The default RAND method makes use of a DRBG.
+      o There is a public and private DRBG instance.
+      o The DRBG instances are fork-safe.
       o Keep all global DRBG instances on the secure heap if it is enabled.
-      o Add a DRBG instance to every SSL instance for lock free operation
-        and to increase unpredictability.
+      o The public and private DRBG instance are per thread for lock free
+        operation
      [Paul Dale, Benjamin Kaduk, Kurt Roeckx, Rich Salz, Matthias St. Pierre]
 
   *) Changed Configure so it only says what it does and doesn't dump