* NEWS: Add note about FIPS mode. Wording suggested by Roland

McGrath.

diff --git a/ChangeLog b/ChangeLog
index 98561a2530ab006986f63ad76399d5ff397c1ab3..b106e0e83b07790f35a7569964fe6cb0e933bfb2 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2012-10-10  Alexandre Oliva <aoliva@redhat.com>
+
+       * NEWS: Add note about FIPS mode.  Wording suggested by Roland
+       McGrath.
+
 2012-10-10  Alexandre Oliva <aoliva@redhat.com>
 
        * crypt/crypt-entry.c: Include fips-private.h.

diff --git a/NEWS b/NEWS
index 490e4dca150273f8ef688d99e0038bc25066f883..4d18638131660bef626030c76f53e72110c8fad3 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -48,6 +48,12 @@ Version 2.17
   the tty file descriptor in /dev/pts or /dev if /proc is not available.  This
   allows creation of chroots without the procfs mounted on /proc.
 
+* The `crypt' function now fails if passed salt bytes that violate the
+  specification for those values.  On Linux, the `crypt' function will
+  consult /proc/sys/crypto/fips_enabled to determine if "FIPS mode" is
+  enabled, and fail on encrypted strings using the MD5 or DES algorithm
+  when the mode is enabled.
+
 \f
 Version 2.16