More NEWS entries for Nettle-3.6.

NEWS

@@ -16,6 +16,24 @@ NEWS for the Nettle 3.6 release
 	* Support for the "CryptoPro" variant of the GOST hash
 	  function, as gosthash94cp. Contributed by Dmitry Baryshkov.
 
+	* Support for GOST DSA signatures, including GOST curves
+	  gc256b and gc512a. Contributed by Dmitry Baryshkov.
+
+	* Support for Intel CET in x86 and x86_64 assembly files, if
+	  enabled via CFLAGS (gcc --fcf-protection=full). Contributed
+	  by H.J. Lu and Simo Sorce.
+
+	* A few new functions to improve support the Chacha variant
+	  with 96-bit nonce and 32-bit block counter (the existing
+	  functions use nonce and counter of 64-bit each), and
+	  functions to set the counter. Contributed by Daiki Ueno.
+
+	* New interface, struct nettle_mac, for MAC (message
+	  authentication) algorithms. This abstraction is only for
+	  MACs that don't require a per-message nonce. For HMAC, the
+	  key size is fixed, and equal the digest size of the
+	  underlying hash function.
+
 	Bug fixes:
 
 	* Fix bug in cfb8_decrypt. Previously, the IV was not updated
@@ -43,6 +61,11 @@ NEWS for the Nettle 3.6 release
 	  consistently match the curve name, e.g., ecc-256.c has been
 	  renamed to ecc-secp256r1.c.
 
+	* Documentation for chacha-poly1305 updated. It is no longer
+	  experimental. The implementation was updated to follow RFC
+	  8439 in Nettle-3.1, but that was not documented or announced
+	  at the time.
+
 NEWS for the Nettle 3.5.1 release
 
 	The Nettle-3.5.1 corrects a packaging mistake in Nettle-3.5.