Commit c3fa1250b5 for openssl.org

commit c3fa1250b5cff20554e5be9aa6346e665edfc2bc
Author: Pauli <paul.dale@oracle.com>
Date:   Mon Aug 31 08:50:27 2026 +1000

    changes: add note about finishing cipher OSSL_PARAM parsers

    Reviewed-by: Simo Sorce <simo@redhat.com>
    Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
    Merge-date: Thu Sep  3 02:17:25 2026
    Merged-from: https://github.com/openssl/openssl/pull/32536

diff --git a/CHANGES.md b/CHANGES.md
index 5ed4b32026..c428b12302 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -32,6 +32,15 @@ OpenSSL 4.1

 ### Changes between 4.0 and 4.1 [xx XXX xxxx]

+ * Refactored remaining cipher `OSSL_PARAM` name parsing so that
+   automatically generated parsers are used instead of
+   `OSSL_PARAM_locate()` calls.  This should ensure that the list
+   of acceptable parameters better matches those which are actually
+   processed.  It should also provide a small performance improvement,
+   because repeated iteration over passed parameter arrays is avoided.
+
+   *Dr Paul Dale*
+
  * Added a `seed_strict` option to the `random` configuration section
    which makes the configured random seed source strictly enforced when
    a provider (such as the FIPS provider) requests entropy or a nonce.