commit 7d1e95c991a508cfa4912c7b93dfab358fc40374
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Apr 29 01:35:48 2015 +0200
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Apr 29 17:07:31 2015 +0200
tree da3da82016d822564b26c9da2fdfee86ae2d10ef
parent e16b62c3a9533dfe4d896e2c373c4484b1326d01

Add countermeasure against cache-based lucky 13

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index 7186add..bbaddbc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -6,6 +6,8 @@
    * With authmode set to SSL_VERIFY_OPTIONAL, verification of keyUsage and
      extendedKeyUsage on the leaf certificate was lost (results not accessible
      via ssl_get_verify_results()).
+   * Add countermeasure against "Lucky 13 strikes back" cache-based attack,
+     https://dl.acm.org/citation.cfm?id=2714625
 
 Features
    * Add x509_crt_verify_info() to display certificate verification results.