commit 5f50104c52eafccacdd45fa4548b376a00350b3f
author Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Thu Sep 03 20:03:15 2015 +0200
committer Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Tue Sep 08 13:39:29 2015 +0200
tree 76911ec339c82aba596dd6967b3497faaa4f69cc
parent 14d800507a8fda5e321fa7e007d2e17100d4ae7c

Add counter-measure against RSA-CRT attack

https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index d3636f0..8be2cdd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,11 @@
 
 = mbed TLS 2.1.0 released 2015-09-04
 
+Security
+   * Add countermeasure against Lenstra's RSA-CRT attack for PKCS#1 v1.5
+     signatures. (Found by Florian Weimer, Red Hat.)
+     https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/
+
 Features
    * Added support for yotta as a build system.
    * Primary open source license changed to Apache 2.0 license.