- markus@cvs.openbsd.org 2002/07/03 09:55:38

[openssh.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 4c26d6641030f66b67228089de25f8e8936ccbed..2f9b6731cd6ca484984b2b28941746295e56a39e 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -45,6 +45,11 @@
      [sshconnect2.c]
      for compression=yes, we fallback to no-compression if the server does
      not support compression, vice versa for compression=no. ok mouring@
+   - markus@cvs.openbsd.org 2002/07/03 09:55:38
+     [ssh-keysign.c]
+     use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
+     in order to avoid a possible Kocher timing attack pointed out by Charles
+     Hannum; ok provos@
 
 20020702
  - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &