changes entry about non-approved FIPS algorithms

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20079)
This commit is contained in:
Pauli 2023-01-20 10:26:45 +11:00 committed by Hugo Landau
parent 8948b57494
commit d4e105f6d5

View File

@ -209,6 +209,14 @@ OpenSSL 3.1
### Changes between 3.0 and 3.1.0 [xx XXX xxxx]
* The FIPS provider includes a few non-approved algorithms for
backward compatibility purposes and the "fips=yes" property query
must be used for all algorithm fetches to ensure FIPS compliance.
The algorithms that are included but not approved are Triple DES and EdDSA.
*Paul Dale*
* Added support for KMAC in KBKDF.
*Shane Lontis*