RSA blinding on CRT operations to counter timing attacks
diff --git a/ChangeLog b/ChangeLog
index a420e6c..36704f1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,8 @@
 Security
    * Fixed potential heap buffer overflow on large hostname setting
    * Fixed potential negative value misinterpretation in load_file()
+   * RSA blinding on CRT operations to counter timing attacks
+     (found by Cyril Arnaud and Pierre-Alain Fouque)
 
 = Version 1.2.8 released 2013-06-19
 Features