Add a CHANGES entry for AES constant time

Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/11411)

diff --git a/CHANGES b/CHANGES
index 5a4c77cca62213b174ae71e9e79ab35706fd9ae8..6239fa41390a844f3686fafbae78a7cac37e1582 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -9,7 +9,14 @@
 
  Changes between 1.1.1f and 1.1.1g [xx XXX xxxx]
 
-  *)
+  *) Added AES consttime code for no-asm configurations
+     an optional constant time support for AES was added
+     when building openssl for no-asm.
+     Enable with: ./config no-asm -DOPENSSL_AES_CONST_TIME
+     Disable with: ./config no-asm -DOPENSSL_NO_AES_CONST_TIME
+     At this time this feature is by default disabled.
+     It will be enabled by default in 3.0.
+     [Bernd Edlinger]
 
  Changes between 1.1.1e and 1.1.1f [31 Mar 2020]