commit 4ecd34f86c9c829b2b48f71b9536955875509428
author Hanno Becker <hanno.becker@arm.com> Wed Jan 17 17:45:31 2018 +0000
committer Hanno Becker <hanno.becker@arm.com> Wed Jan 17 17:47:58 2018 +0000
tree 459765461d81c3ef3a503c0b59c2a0ffc4b17a3e
parent 1cc67a0d0ecc46e4916a2a42a567c1f010ae3a37

Adapt ChangeLog

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index ed7818e..d853b22 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -20,6 +20,11 @@
      heavily-loaded machine.
 
 Bugfix
+   * Properly initialize and free SHA-256 / SHA-512 context in entropy module
+     instead of performing zeroization only. This could lead to failure for
+     alternative implementations of SHA-256 / SHA-512 for which zeroization
+     of contexts is not a proper way of initialization.
+     Found and fix suggested by ccli8.
    * Fix ssl_parse_record_header() to silently discard invalid DTLS records
      as recommended in RFC 6347 Section 4.1.2.7.
    * Fix memory leak in mbedtls_ssl_set_hostname() when called multiple times.