From: Bodo Möller <bodo@openssl.org>
Date: Mon, 16 May 2005 19:14:38 +0000 (+0000)
Subject: Change wording for BN_mod_exp_mont_consttime() entry
X-Git-Tag: BEN_FIPS_TEST_8~7
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=fd86c390eb0836794bfd422611dddab9e6546b81;p=openssl

Change wording for BN_mod_exp_mont_consttime() entry
---

diff --git a/CHANGES b/CHANGES
index b87152a8e7..83ffbba552 100644
--- a/CHANGES
+++ b/CHANGES
@@ -5,10 +5,10 @@
  Changes between 0.9.7g and 0.9.7h  [XX xxx XXXX]
 
   *) Make a new fixed-window mod_exp implementation the default for
-     RSA, DSA, and DH private-key operations to mitigate the
-     hyper-threading timing attacks pointed out by Colin Percival
-     (http://www.daemonology.net/hyperthreading-considered-harmful/),
-     and potential related attacks.
+     RSA, DSA, and DH private-key operations so that the sequence of
+     squares and multiplies and the memory access pattern are
+     independent of the particular secret key.  This will mitigate
+     cache-timing and potential related attacks.
 
      BN_mod_exp_mont_consttime() is the new exponentiation implementation,
      and this is automatically used by BN_mod_exp_mont() if the new flag