NEWS: mention 3.8.7 changes

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/NEWS b/NEWS
index 44db17497317f3d55308a3d1bb405a126601fc75..b9f43504e96e098a2b43e7abf621bf3a33ca8ec4 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,19 @@ Copyright (C) 2000-2016 Free Software Foundation, Inc.
 Copyright (C) 2013-2019 Nikos Mavrogiannopoulos
 See the end for copying conditions.
 
+* Version 3.8.7 (unreleased)
+
+** libgnutls: New configure option to compile out DSA support
+   The --disable-dsa configure option has been added to completely disable DSA
+   algorithm support.
+
+** libgnutls: Experimental support for X25519Kyber768Draft00 key exchange in TLS
+   For testing purposes, the hybrid post-quantum key exchange defined
+   in draft-tls-westerbaan-xyber768d00 has been implemented using
+   liboqs. Since the algorithm is still not finalized, the support of
+   this key exchange is disabled by default and can be enabled with
+   the --with-liboqs configure option.
+
 * Version 3.8.6 (released 2024-07-03)
 
 ** libgnutls: PBMAC1 is now supported as a MAC mechanism for PKCS#12