From 3682db5efd00a2d812a1ff3f6bb4716013a94f0d Mon Sep 17 00:00:00 2001 From: Janos Follath Date: Thu, 23 Mar 2017 10:41:56 +0000 Subject: [PATCH] Add Changelog entry for RSA exponent blinding --- ChangeLog | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ChangeLog b/ChangeLog index b46c72879..5f79eaabb 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,14 @@ mbed TLS ChangeLog (Sorted per branch, date) += mbed TLS 1.3.x branch released xxxx-xx-xx + +Security + * Add exponent blinding to RSA private operations as a countermeasure + against side-channel attacks like the cache attack described in + https://arxiv.org/abs/1702.08719v2. + Found and fix proposed by Michael Schwarz, Samuel Weiser, Daniel Gruss, + Clémentine Maurice and Stefan Mangard. + = mbed TLS 1.3.19 branch released 2017-03-08 Security