Clarify experimental status of sha3 and chacha-poly1305 in NEWS.

diff --git a/NEWS b/NEWS
index 32e67ce1e7e6377c7b9321cdecca6bb54207ea48..856a85199ecaf992072a79045f08879bf964f980 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -96,20 +96,20 @@ NEWS for the Nettle 3.0 release
 
        New features:
 
-       * Support for poly1305-aes MAC.
+       * Support for Poly1305-AES MAC.
 
-       * Experimental support for the Chacha stream cipher and the
-         chacha-poly1305 AEAD mode. Specifications are still in
-         flux, and future releases may do incompatible changes to
-         track standardization. Currently uses 256-bit key and 64-bit
-         nonce.
+       * Support for the ChaCha stream cipher and EXPERIMENTAL
+         support for the ChaCha-Poly1305 AEAD mode. Specifications
+         are still in flux, and future releases may do incompatible
+         changes to track standardization. Currently uses 256-bit key
+         and 64-bit nonce.
 
        * Support for EAX mode.
 
        * Support for CCM mode. Contributed by Owen Kirby.
 
-       * Support for additional variants of SHA512 with output size
-         of 224 and 256 bits. Contributed by Joachim Strömbergson.
+       * Additional variants of SHA512 with output size of 224 and
+         256 bits. Contributed by Joachim Strömbergson.
 
        * New interface, struct nettle_aead, for mechanisms providing
          authenticated encryption with associated data (AEAD).
@@ -124,6 +124,12 @@ NEWS for the Nettle 3.0 release
 
        Miscellaneous:
 
+       * SHA3 is now documented as EXPERIMENTAL. Nettle currently
+         implements SHA3 as specified at the time Keccak won the SHA3
+         competition. However, the final standard specified by NIST
+         is likely to be incompatible, in which case future releases
+         may do incompatible changes to track standardization.
+
        * The portability fix for the rotation macros, mentioned in
          NEWS for 2.7.1, actually didn't make it into that release.
          It is included now.