Tweak RSA vulnerability changelog entry
* Correct the list of authors.
* Add the CVE number.
* Improve the impact description.
diff --git a/ChangeLog b/ChangeLog
index 98b95ca..a60799d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,9 +5,10 @@
Security
* Fix timing variations and memory access variations in RSA PKCS#1 v1.5
decryption that could lead to a Bleichenbacher-style padding oracle
- attack. In TLS, this affects RSA-based ciphersuites without DHE or
- ECDHE. Reported by Yuval Yarom, Eyal Ronen, Adi Shamir, David Wong and
- Daniel Genkin.
+ attack. In TLS, this affects servers that accept ciphersuites based on
+ RSA decryption (i.e. ciphersuites whose name contains RSA but not
+ (EC)DH(E)). Reported by Eyal Ronen, Robert Gillham, Daniel Genkin, Adi
+ Shamir, David Wong and Yuval Yarom. CVE-2018-19608
Bugfix
* Fix failure in hmac_drbg in the benchmark sample application, when