From: Andy Polyakov <appro@openssl.org>
Date: Sun, 15 Jul 2018 15:59:59 +0000 (+0200)
Subject: CHANGES: mention blinding reverting in ECDSA. [skip ci]
X-Git-Tag: OpenSSL_1_1_1-pre9~124
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=1c073b9521ce7dbdd5689bdf7ae5fa87557c3529;p=oweals%2Fopenssl.git

CHANGES: mention blinding reverting in ECDSA. [skip ci]

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: David Benjamin <davidben@google.com>
(Merged from https://github.com/openssl/openssl/pull/6664)
---

diff --git a/CHANGES b/CHANGES
index c1d4c2d5ba..ae59f92259 100644
--- a/CHANGES
+++ b/CHANGES
@@ -9,6 +9,10 @@
 
  Changes between 1.1.0h and 1.1.1 [xx XXX xxxx]
 
+  *) Revert blinding in ECDSA sign and instead make problematic addition
+     length-invariant. Switch even to fixed-length Montgomery multiplication.
+     [Andy Polyakov]
+
   *) Use the new ec_scalar_mul_ladder scaffold to implement a specialized ladder
      step for binary curves. The new implementation is based on formulas from
      differential addition-and-doubling in mixed Lopez-Dahab projective