From: Miroslav Lichvar Date: Tue, 8 Oct 2024 11:49:14 +0000 (+0200) Subject: doc: update NEWS X-Git-Tag: 4.6.1^0 X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=b0ac5992fb891d62c4aa26162b890042320df360;p=thirdparty%2Fchrony.git doc: update NEWS --- diff --git a/NEWS b/NEWS index c95bd2fe..35557896 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,17 @@ +New in version 4.6.1 +==================== + +Enhancements +------------ +* Add ntsaeads directive to enable only selected AEAD algorithms for NTS + +Workarounds +----------- +* Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm + (by default the keys are generated differently than in RFC 8915 for + compatibility with chrony server and client versions 4.4, 4.5, and 4.6) +* Switch to compliant NTS keys if first response from server is NTS NAK + New in version 4.6 ==================