Add ChangeLog entry

Signed-off-by: Janos Follath <[email protected]>
2026-10-08 18:07:24 +00:00 · 2021-06-28 10:24:20 +01:00
parent 9a64d3e0ca
commit 7a8a0d7e3d
1 changed files with 6 additions and 0 deletions
@@ -0,0 +1,6 @@
+Security
+   * An adversary with access to precise enough timing information (typically, a
+     co-located process) could recover a Curve25519 or Curve448 static ECDH key
+     after inputting a chosen public key and observing the victim performing the
+     corresponding private-key operation. Found and reported by Leila Batina,
+     Lukas Chmielewski, Björn Haase, Niels Samwel and Peter Schwabe.