From e614129895c8f3d27db24cc5ee72ceb72c0e0e7f Mon Sep 17 00:00:00 2001 From: Dave Rodgman Date: Wed, 27 Sep 2023 16:27:50 +0100 Subject: [PATCH] Update padding const-time fix changelog Signed-off-by: Dave Rodgman --- ChangeLog.d/padding-ct-changelog.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ChangeLog.d/padding-ct-changelog.txt b/ChangeLog.d/padding-ct-changelog.txt index e3d3424a98..3e2c7e2e84 100644 --- a/ChangeLog.d/padding-ct-changelog.txt +++ b/ChangeLog.d/padding-ct-changelog.txt @@ -1,6 +1,6 @@ Security * Improve padding calculations in CBC decryption, NIST key unwrapping and RSA OAEP decryption. With the previous implementation, some compilers - (notably recent versions of Clang) could produce non-constant time code, - which could allow a padding oracle attack if the attacker has access to - precise timing measurements. + (notably recent versions of Clang and IAR) could produce non-constant + time code, which could allow a padding oracle attack if the attacker + has access to precise timing measurements.