changes: add note about PCT on key import to the FIPS provider

This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
This commit is contained in:
Pauli 2025-01-29 12:41:59 +11:00 committed by Tomas Mraz
parent 57230da2bd
commit 32ff539daf
1 changed files with 5 additions and 0 deletions

View File

@ -31,6 +31,11 @@ OpenSSL 3.6
### Changes between 3.5 and 3.6 [xx XXX xxxx]
* The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
*Dr Paul Dale*
* Introduce SSL_OP_SERVER_PREFERENCE superceding misleadingly
named SSL_OP_CIPHER_SERVER_PREFERENCE.