From: Pauli <ppzgs1@gmail.com>
Date: Mon, 3 Feb 2025 12:01:57 +0000 (+1100)
Subject: changes: add note about the new provider random hook
X-Git-Tag: openssl-3.5.0-alpha1~656
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d46667284d193ceb3242ebf17422e62b1c837c60;p=thirdparty%2Fopenssl.git

changes: add note about the new provider random hook

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/24498)
---

diff --git a/CHANGES.md b/CHANGES.md
index 51d17b3a9b6..e7f0b6a4725 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -30,6 +30,13 @@ OpenSSL 3.5
 
 ### Changes between 3.4 and 3.5 [xx XXX xxxx]
 
+* A new random generation API has been introduced which modifies all
+  of the L<RAND_bytes(3)> family of calls so they are routed through a
+  specific named provider instead of being resolved via the normal DRBG
+  chaining.  In a future OpenSSL release, this will obsolete RAND_METHOD.
+
+  *Dr Paul Dale*
+
 * New inline functions were added to support loads and stores of unsigned
   16-bit, 32-bit and 64-bit integers in either little-endian or big-endian
   form, regardless of the host byte-order.  See the `OPENSSL_load_u16_le(3)`