1 files changed, 64 insertions, 12 deletions

diff --git a/ChangeLog b/ChangeLog
index eccb261..1739cfc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -28,9 +28,54 @@ history is also available from Git.
 
 LibreSSL Portable Release Notes:
 
-4.1.0 - In development
+4.2.0 - In development
 
         * Portable changes
+        * Internal improvements
+          - Cleaned up code implementing block cipher modes of operation.
+            Includes untangling a horrible #ifdef mess and removing a few
+            instances of undefined behavior.
+          - Removed assembly implementations of AES using bit slicing (BS-AES)
+            and vector permutation (VP-AES).
+          - Integrated AES-NI into the AES API.
+          - Removed OPENSSL_SMALL_FOOTPRINT and OPENSSL_FIPSAPI.
+          - Lots of cleanup and removal of code with undefined behavior in
+            the block cipher modes of operation implementations.
+          - Implemented constant time EC field element operations to allow
+            implementing elliptic curve operations without bignum arithmetic.
+          - Implemented an EC method using homogeneous projective coordinates.
+            This allows exception-free elliptic curve arithmetic in constant
+            time.
+          - Started cleaning up the openssl speed implementation.
+          - The last SIGILL-based CPU capability detection was removed.
+            Instead, capabilities are now detected using a constructor on
+            library load, which improves the incomplete coverage by calls
+            to OPENSSL_init_crypto() on various entry points.
+        * Compatibility changes
+          - Removed the -msie_hack option from the openssl(1) ca subcommand.
+          - Removed parameters of the 239-bit prime curves from X9.62, H.5.2:
+            prime239v1, prime239v2, prime239v3.
+          - Increased default MAC salt length used by PKCS12_set_mac(3) to 16 
+            per recommendation of NIST SP 800-132.
+          - Encrypted PKCS#8 key files now use a default password-based key
+            derivation function that is acceptable in the present millenium.
+          - Of the old *err() only PEMerr(), RSAerr(), and SSLerr() remain.
+        * New features
+          - Allow specifying ALPN in nc(1) via -Talpn="http/1.1,http:/1.0".
+        * Bug fixes
+          - Avoid pointer arithmetic on NULL for memory BIOs.
+        * Documentation
+          - Rewrote most of the EC documentation from scratch to be at least
+            somewhat accurate and intelligible.
+        * Testing and proactive security
+          - Added a testing framework that will help deduplicating lots of
+            ad-hoc code in the regression tests.
+
+4.1.0 - Stable release
+
+        * Portable changes
+          - Added initial experimental support for loongarch64.
+          - Fixed compilation for mips32 and reenable CI.
           - Fixed CMake builds on FreeBSD.
           - Fixed the --prefix option for cmake --install.
           - Fixed tests for MinGW due to missing sh(1).
@@ -46,8 +91,9 @@ LibreSSL Portable Release Notes:
             These make use of the SHA-NI instruction if it is available and
             replace the perl-generated assembly optimized for museum pieces.
             These are not yet enabled in libressl-portable.
-          - New SHA-256 assembly implementation for aarch64 making use of the
-            ARM Cryptographic Extension (CE). Not yet enabled in portable.
+          - New SHA-256 and SHA-512 assembly implementations for aarch64
+            making use of the ARM Cryptographic Extension (CE). Not yet
+            enabled in libressl-portable.
           - New simplified, readable MD5 implementation for amd64.
           - Rewrote BN_bn2binpad() and its lebin siblings.
           - The BIGNUMs in EC_GROUP and EC_POINT are now heap allocated.
@@ -60,8 +106,11 @@ LibreSSL Portable Release Notes:
           - Replaced combinations of BN_MONT_CTX_new/set with an internal
             BN_MONT_CTX_create().
           - Replaced BN_bn2hex() reimplementation in openssl(1) ca with
-            a poper API call.
+            a proper API call.
           - Fixed integer overflows due to signed shift in obj_dat.c.
+          - Improved some X509_VERIFY_PARAM internals and avoid an out of
+            bounds read from public API.
+          - Imported ML-KEM 768 and 1024 from BoringSSL (not yet public API).
         * Compatibility changes
           - Added an OPENSSL_INIT_NO_ATEXIT flag for OPENSSL_init_crypto().
             It has no effect since LibreSSL doesn't call atexit().
@@ -70,6 +119,9 @@ LibreSSL Portable Release Notes:
           - EC_METHOD is no longer public and the API exposing it has been
             removed. This includes EC_GROUP_new(), EC_GFp_mont_method(),
             EC_GROUP_method_of() and EC_METHOD_get_field_type().
+          - The precomputation stubs for EC_GROUP were removed.
+          - The API setting Jacobian projective coordinates for a point was
+            removed as were EC_POINTs_{mul,make_affine}().
           - All elliptic curves over fields with less than 224 bits and a
             few more were removed from the built-in curves. This includes
             all WTLS curves and P-192.
@@ -78,25 +130,25 @@ LibreSSL Portable Release Notes:
           - Removed the -C option to generate "C code" from the openssl(1)
             dh, dhparam, dsaparam, ecparam, and x509 subcommands.
           - Removed #error in headers when OPENSSL_NO_* is defined.
-          - EC_METHOD is no longer public and all public API directly using
-            it was removed. This includes EC_GROUP_new(), EC_GFp_mont_method()
-            EC_{GROUP,POINT}_method_of() and EC_METHOD_get_field_type().
-          - The precomputation stubs for EC_GROUP were removed.
-          - The API setting Jacobian projective coordinates for a point was
-            removed as were EC_POINTs_{mul,make_affine}().
           - CRYPTO_set_mem_functions() now matches OpenSSL 1.1 and
             CRYPTO_set_mem_ex_functions() was removed.
-          - X509_NAME_print() and X509_OBJECT_up_ref_count() are no longer public.
+          - The tls_session_secret_cb_fn type now matches OpenSSL 1.1.
+          - Unexport X509_NAME_print() and X509_OBJECT_up_ref_count().
           - const corrected UI_OpenSSL() and BN_MONT_CTX_copy().
           - Support OPENSSL_NO_FILENAMES.
+          - Support SSL_OP_NO_RENEGOTIATION and SSL_OP_ALLOW_CLIENT_RENEGOTIATION.
+          - Export PKCS12_key_gen_uni() again.
         * New features
           - libtls has a new tls_peer_cert_common_name() API call to retrieve
             the peer's common name without having to inspect the PEM.
-          - Imported ML-KEM 768 and 1024 from BoringSSL (not yet public API).
         * Bug fixes
           - Plugged a leak in eckey_compute_pubkey().
           - Again allow the magic values -1, -2 and -3 for the salt length
             of an RSA-PSS key in the EVP_PKEY_CTX_ctrl_str() interface.
+          - Fixed a few memory leaks in legacy code.
+        * Documentation
+          - The remaining undocumented public EVP API is now documented.
+          - Reorganization of existing documentation for clarity and accuracy.
         * Testing and proactive security
           - Improved regress coverage of the EC code.