commit 6a229c1f8c1e79a9a57ce9c519e146037b1b4c73
author Paul Bakker <p.j.bakker@polarssl.org> Mon Mar 11 15:56:17 2013 +0100
committer Paul Bakker <p.j.bakker@polarssl.org> Mon Mar 11 15:56:17 2013 +0100
tree e1451b2d368460baecd2a6eb98528c93291e2c08
parent cb60e7c065d15ac311a94a1cb8ecce5df495b251

Fixed timing difference resulting from badly formatted padding.
(cherry picked from commit 4582999be608c9794d4518ae336b265084db9f93)

Conflicts:
	ChangeLog
	library/ssl_tls.c

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 6753726..5884e49 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,10 @@
 Changes
    * Allow enabling of dummy error_strerror() to support some use-cases
 
+Security
+   * Removed timing differences during SSL message decryption in
+     ssl_decrypt_buf() due to badly formatted padding
+
 = Version 1.1.5 released on 2013-01-16
 Bugfix
    * Fixed MPI assembly for SPARC64 platform