From: Orr Toledano <otoledan@amazon.com>
Date: Thu, 20 May 2021 22:13:30 +0000 (+0000)
Subject: Documentation for RNDR and RNDRRS
X-Git-Tag: openssl-3.2.0-alpha1~3190
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e8b597f33143410fb50bdeba8722c249524bc0b9;p=thirdparty%2Fopenssl.git

Documentation for RNDR and RNDRRS

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15361)
---

diff --git a/CHANGES.md b/CHANGES.md
index 16e2c341bdc..7ddc41a0e73 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -24,6 +24,11 @@ OpenSSL 3.1
 
 ### Changes between 3.0 and 3.1 [xx XXX xxxx]
 
+ * RNDR and RNDRRS support in provider functions to provide
+   random number generation for Arm CPUs (aarch64).
+
+   *Orr Toledano*
+
  * s_client and s_server apps now explicitly say when the TLS version
    does not include the renegotiation mechanism. This avoids confusion
    between that scenario versus when the TLS version includes secure
diff --git a/INSTALL.md b/INSTALL.md
index 70eb8da1ed4..40ca7090b5d 100644
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -446,7 +446,8 @@ This source is ignored by the FIPS provider.
 
 ### rdcpu
 
-Use the `RDSEED` or `RDRAND` command if provided by the CPU.
+Use the `RDSEED` or `RDRAND` command on x86 or `RNDRRS` command on aarch64
+if provided by the CPU.
 
 ### librandom