Update NEWS file

--

1 files changed, 35 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 5ad737ae1..ce441e654 100644
--- a/NEWS
+++ b/NEWS
@@ -3,10 +3,45 @@ Noteworthy changes in version 2.5.23 (unreleased)
 
  * New and extended features:
 
+   - gpg: New option --allow-9980 to enable the processing of RFC-9980
+     specified data structures.  The use of this option is only
+     recommended if external policy requirements demand the use of
+     these governmental approved specification.  PGP folks requiring
+     some PQC resistance should keep on using the standard LibrePGP
+     Kyber algorithm introduced 2 years ago.  [rG6803ce215c]
+
+   - gpg: In allow-9980 mode support PQC encryption using ML-KEM (aka
+     Kyber) with X448, X25519, Brainpool or NIST curves as specified
+     by RFC-9980 et al.
+
+   - gpg: In allow-9980 mode support ED25519 and X25519 as specified
+     by RFC-9580 under the names "ietf27" and "ietf27".
+
+   - gpg: Add experimental support for a --compliance=fips mode to use
+     GCM for bulk encryption.  [rG05c271f45a]
+
+   - scd: Add Nitrokey 3 to pcsc-shared interference detection.
+     [T8331]
+
  * Bug fixes:
 
+   - gpgsm: Fix an exploitable printf bug when using the debug option
+     "--debug x509".  [rGe6d92ff7af]
+
+   - dirmngr: Make the LDAP upload flags also work for KS_SEARCH.
+     [T7866]
+
+
  * Other changes:
 
+   - New option --debug-no-libgcrypt for gpg, gpgsm, and agent.  This
+     debug option is useful to avoid cluttering other debug output
+     with libgcrypt generated debug details.
+
+   - gpg: New --list-options "debug-show-sexp" to print a secret key
+     as an s-expression.  [rG1e0261fe50]
+
+
  Release-info: https://dev.gnupg.org/T8425