cfi build fixes in x86-64 ghash assembly

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index ff77c1b4b7b9011e5824882831db3a110e30492e..f58022b3b9947e8ae5a6b3184ec301831216cbcf 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -7,7 +7,17 @@
  https://github.com/openssl/openssl/commits/ and pick the appropriate
  release branch.
 
- Changes between 1.1.1a and 1.1.1b [xx XXX xxxx]
+ Changes between 1.1.1b and 1.1.1c [xx XXX xxxx]
+
+  *)
+
+ Changes between 1.1.1a and 1.1.1b [26 Feb 2019]
+
+  *) Added SCA hardening for modular field inversion in EC_GROUP through
+     a new dedicated field_inv() pointer in EC_METHOD.
+     This also addresses a leakage affecting conversions from projective
+     to affine coordinates.
+     [Billy Bob Brumley, Nicola Tuveri]
 
   *) Change the info callback signals for the start and end of a post-handshake
      message exchange in TLSv1.3. In 1.1.1/1.1.1a we used SSL_CB_HANDSHAKE_START