SCA hardening for mod. field inversion in EC_GROUP

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index d6342524f7b3fc0692b02f1fcdc0a21956806126..d0b6fd7f2f1f0c1b4185890362df31a2e100fe3e 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,12 @@
 
  Changes between 1.1.0j and 1.1.0k [xx XXX xxxx]
 
+  *) Added SCA hardening for modular field inversion in EC_GROUP through
+     a new dedicated field_inv() pointer in EC_METHOD.
+     This also addresses a leakage affecting conversions from projective
+     to affine coordinates.
+     [Billy Bob Brumley, Nicola Tuveri]
+
   *) Fix a use after free bug in d2i_X509_PUBKEY when overwriting a
      re-used X509_PUBKEY object if the second PUBKEY is malformed.
      [Bernd Edlinger]