From b0897535272740fd8d1f5d0ec0b8030d53dbcca2 Mon Sep 17 00:00:00 2001 From: Theo Buehler Date: Tue, 25 Jun 2024 13:46:41 -0600 Subject: Update ChangeLog --- ChangeLog | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/ChangeLog b/ChangeLog index 1d39d66..42b2c59 100644 --- a/ChangeLog +++ b/ChangeLog @@ -98,6 +98,10 @@ LibreSSL Portable Release Notes: to zero, which could lead to a crash due to accessing a zero sized allocation. - Fixed i2d_ASN1_OBJECT() with an output buffer pointing to NULL. + - Implemented RSA key exchange in constant time. This is done by + decrypting with RSA_NO_PADDING and checking the padding in libssl + in constant time. This is possible because the pre-master secret + is of known length based on the size of the RSA key. 3.9.0 - Development release -- cgit v1.2.3-55-g6feb