From b0ac5992fb891d62c4aa26162b890042320df360 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Tue, 8 Oct 2024 13:49:14 +0200 Subject: [PATCH] doc: update NEWS --- NEWS | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/NEWS b/NEWS index c95bd2f..3555789 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,17 @@ +New in version 4.6.1 +==================== + +Enhancements +------------ +* Add ntsaeads directive to enable only selected AEAD algorithms for NTS + +Workarounds +----------- +* Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm + (by default the keys are generated differently than in RFC 8915 for + compatibility with chrony server and client versions 4.4, 4.5, and 4.6) +* Switch to compliant NTS keys if first response from server is NTS NAK + New in version 4.6 ==================