From bc7ed4eac1f1b73bd7917d88d8ae314d2e2168dc Mon Sep 17 00:00:00 2001
From: NIIBE Yutaka <gniibe@fsij.org>
Date: Thu, 19 Dec 2013 12:06:25 +0900
Subject: [PATCH] update changelog

---
 ChangeLog | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index b3ecd63..42d7fca 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,13 @@
+2013-12-19  Niibe Yutaka  <gniibe@fsij.org>
+
+	* polarssl/library/bignum.c (mpi_montsqr): New.
+	(mpi_exp_mod): Use mpi_montsqr.
+
+	Note that this change introduces a vulnerability by the
+	Yarom/Falkner flush+reload cache side-channel attack.  When this
+	code is used on general purpose computer where we can observe
+	which code is executed (sqr or mul), it's not safe.
+
 2013-12-16  Niibe Yutaka  <gniibe@fsij.org>
 
 	* polarssl/include/polarssl/bn_mul.h (MULADDC_1024_CORE)