Add ChangeLog entry
Signed-off-by: Janos Follath <janos.follath@arm.com>
diff --git a/ChangeLog.d/reject-low-order-points-early.txt b/ChangeLog.d/reject-low-order-points-early.txt
new file mode 100644
index 0000000..eb73569
--- /dev/null
+++ b/ChangeLog.d/reject-low-order-points-early.txt
@@ -0,0 +1,6 @@
+Security
+ * An adversary with access to precise enough timing information (typically, a
+ co-located process) could recover a Curve25519 or Curve448 static ECDH key
+ after inputting a chosen public key and observing the victim performing the
+ corresponding private-key operation. Found and reported by Leila Batina,
+ Lukas Chmielewski, Björn Haase, Niels Samwel and Peter Schwabe.