changes: add note about PCT on key import to the FIPS provider

This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)

(cherry picked from commit 32ff539daf83cccc15a159fe214cac66acc80fec)

diff --git a/CHANGES.md b/CHANGES.md
index 8d3ce56b00ea0a66bdb21e80d626fc90f8a5b2bf..d80e9b4804cb273ba5e2e0f393bf4b29ab5a9bb2 100644 (file)
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -30,7 +30,10 @@ OpenSSL 3.5
 
 ### Changes between 3.5.1 and 3.5.2 [xx XXX xxxx]
 
- * none yet
+ * The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
+   This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
+
+   *Dr Paul Dale*
 
 ### Changes between 3.5.0 and 3.5.1 [1 Jul 2025]