commit 4582999be608c9794d4518ae336b265084db9f93
author Paul Bakker <p.j.bakker@polarssl.org> Thu Jan 03 14:52:21 2013 +0100
committer Paul Bakker <p.j.bakker@polarssl.org> Sat Feb 02 19:04:13 2013 +0100
tree 29d6f8f9ec6cda676e0d419d33b1ceace418f68d
parent 8fe40dcd7d3b46193f74032361efb674112ee9e5

Fixed timing difference resulting from badly formatted padding.

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 2689dd0..34943dc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,10 @@
 Changes
    * Allow enabling of dummy error_strerror() to support some use-cases
 
+Security
+   * Removed timing differences during SSL message decryption in
+     ssl_decrypt_buf() due to badly formatted padding
+
 = Version 1.2.4 released 2013-01-25
 Changes
    * Added ssl_handshake_step() to allow single stepping the handshake process