commit 6687cd07f3d3e9092762e7ad8bda93bf3ab8f8b4
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Apr 21 22:32:05 2021 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Jun 23 13:44:35 2021 +0200
tree 37daad815808fe8ba5491bee1faf063a06488e61
parent 576464873a25196d2f0720e7183fcd7635dbdaae

Refuse to destroy read-only keys

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

ChangeLog.d/psa-read-only-keys.txt

diff --git a/ChangeLog.d/psa-read-only-keys.txt b/ChangeLog.d/psa-read-only-keys.txt
index 9e30810..a4a2823 100644
--- a/ChangeLog.d/psa-read-only-keys.txt
+++ b/ChangeLog.d/psa-read-only-keys.txt
@@ -1,4 +1,5 @@
-Features
-   * The PSA API no longer allows the creation of keys with a read-only lifetime.
-     The persistence level PSA_KEY_PERSISTENCE_READ_ONLY can now only be used
-     as intended, for keys that cannot be modified through normal use of the API.
+Bugfix
+   * The PSA API no longer allows the creation or destruction of keys with a
+     read-only lifetime. The persistence level PSA_KEY_PERSISTENCE_READ_ONLY
+     can now only be used as intended, for keys that cannot be modified through
+     normal use of the API.