Implement SSH KDF

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 2fbe89f382d45590a621366f0691b1b5f0db980f..5fcf66773626d0ecccd99ddb0ff82da16f420b8b 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,16 @@
 
  Changes between 1.1.1 and 3.0.0 [xx XXX xxxx]
 
+  *) Added property based algorithm implementation selection framework to
+     the core.
+     [Paul Dale]
+
+  *) Added SCA hardening for modular field inversion in EC_GROUP through
+     a new dedicated field_inv() pointer in EC_METHOD.
+     This also addresses a leakage affecting conversions from projective
+     to affine coordinates.
+     [Billy Bob Brumley, Nicola Tuveri]
+
   *) Added EVP_KDF, an EVP layer KDF API, to simplify adding KDF and PRF
      implementations.  This includes an EVP_PKEY to EVP_KDF bridge for
      those algorithms that were already supported through the EVP_PKEY API