From 1c073b9521ce7dbdd5689bdf7ae5fa87557c3529 Mon Sep 17 00:00:00 2001 From: Andy Polyakov Date: Sun, 15 Jul 2018 17:59:59 +0200 Subject: [PATCH] CHANGES: mention blinding reverting in ECDSA. [skip ci] Reviewed-by: Rich Salz Reviewed-by: David Benjamin (Merged from https://github.com/openssl/openssl/pull/6664) --- CHANGES | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGES b/CHANGES index c1d4c2d5ba..ae59f92259 100644 --- a/CHANGES +++ b/CHANGES @@ -9,6 +9,10 @@ Changes between 1.1.0h and 1.1.1 [xx XXX xxxx] + *) Revert blinding in ECDSA sign and instead make problematic addition + length-invariant. Switch even to fixed-length Montgomery multiplication. + [Andy Polyakov] + *) Use the new ec_scalar_mul_ladder scaffold to implement a specialized ladder step for binary curves. The new implementation is based on formulas from differential addition-and-doubling in mixed Lopez-Dahab projective -- 2.25.1