From 1073e2001caee13cc1fa52de97feddd633d50fd8 Mon Sep 17 00:00:00 2001
From: Evan Hunt <each@isc.org>
Date: Mon, 31 Jul 2017 10:36:00 -0700
Subject: [PATCH] [v9_11] revise CHANGES note and add release note

---
 CHANGES           |  6 +++++-
 doc/arm/notes.xml | 16 ++++++++++++++++
 2 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 9847060f8f..195739fa61 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,8 @@
-4665.	[func]		Add Ed25519 support (RFC 8080). [RT #25519]
+4665.	[protocol]	Added support for ED25519 and ED448 DNSSEC signing
+			algorithms (RFC 8080). (Note: these algorithms
+			depend on code currently in the development branch
+			of OpenSSL which has not yet been released.)
+			[RT #44696]
 
 4663.	[cleanup]	Clarify error message printed by dnssec-dsfromkey.
 			[RT #21731]
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 40533f92ac..8757ec9d20 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -125,6 +125,22 @@
     </itemizedlist>
   </section>
 
+  <section xml:id="proto_changes"><info><title>Protocol Changes</title></info>
+    <itemizedlist>
+      <listitem>
+	<para>
+	  BIND can now use the Ed25519 and Ed448 Edwards Curve DNSSEC
+	  signing algorithms described in RFC 8080. Note, however, that
+	  these algorithms must be supported in OpenSSL;
+	  currently they are only available in the development branch
+	  of OpenSSL at
+	  <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="https://github.com/openssl/openssl">https://github.com/openssl/openssl</link>.
+	  [RT #44696]
+	</para>
+      </listitem>
+    </itemizedlist>
+  </section>
+
   <section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
     <itemizedlist>
       <listitem>