Add OPENSSL_cleanse() to help cleanse memory and avoid certain compiler

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index f5bda1b6949426420964dc0aade26ddbe78638cb..2d7c5b5f5082729c3958ea7f360fce27b14375cc 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2116,6 +2116,14 @@ des-cbc           3624.96k     5258.21k     5530.91k     5624.30k     5628.26k
 
  Changes between 0.9.6g and 0.9.6h  [xx XXX xxxx]
 
+  *) New function OPENSSL_cleanse(), which is used to cleanse a section of
+     memory from it's contents.  This is done with a counter that will
+     place alternating values in each byte.  This can be used to solve
+     two issues: 1) the removal of calls to memset() by highly optimizing
+     compilers, and 2) cleansing with other values than 0, since those can
+     be read through on certain media, for example a swap space on disk.
+     [Geoff Thorpe]
+
   *) Bugfix: client side session caching did not work with external caching,
      because the session->cipher setting was not restored when reloading
      from the external cache. This problem was masked, when