recent DH change does not avoid *all* possible small-subgroup attacks;

let's be clear about that

diff --git a/CHANGES b/CHANGES
index a67a0bbaff94ad2608ecf92c6e358b3ceb3c4368..5310571ec036b58a7e3d345b5c9b9990ad21c030 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -4,7 +4,7 @@
 
  Changes between 0.9.8 and 0.9.8a  [XX xxx XXXX]
 
-  *) Avoid small subgroup attacks in Diffie-Hellman.
+  *) Avoid some small subgroup attacks in Diffie-Hellman.
      [Nick Mathewson and Ben Laurie]
 
   *) Add functions for well-known primes.