mention security fix in ChangeLog

RNCryptor · Jan 25, 2016 · 56b757c · 56b757c
1 parent e5431fe
commit 56b757c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/ChangeLog.asc b/ChangeLog.asc
@@ -1,5 +1,12 @@
 = ChangeLog file for RNCryptor-C
 
+= v1.04
+* memcmp() typically does not execute in constant time. Hence timing attack
+can be performed while comparing hmacs. Thanks to Scott Arciszewski for
+pointing it out. Fixes issue #1
+
+(Jan-25-2016)
+
 = v1.03
 * Uses less memory, removed duplicate code. Lots of Code cleanup.
 * Updated RNCryptor-C link