Add ChangeLog entry for ECC side channel fix

Signed-off-by: Manuel Pégourié-Gonnard <[email protected]>
2026-09-11 20:59:56 +00:00 · 2026-05-18 10:45:11 +02:00
parent 07db30533a
commit 672705bd00
1 changed files with 5 additions and 0 deletions
@@ -0,0 +1,5 @@
+Security
+   * Fix a side channel in ECC computations that allows a powerful local
+     attacker (typically, untrusted OS attacking a secure enclave) to fully
+     recover long-term secret keys. Found and reported by Alejandro Cabrera
+     Aldaya from Tampere University.