server: Compare MAC tags in constant time.

[tripe] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 0183dc0..367ec33 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+tripe (1.0.0pre13) experimental; urgency=low
+
+  * Compare MAC tags in constant time.  (Fixes a timing attack performed
+    by an adversary who can watch the timestamp on the server log.)
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Mon, 27 May 2013 22:58:31 +0100
+
 tripe (1.0.0pre12.2) experimental; urgency=low
 
   * New `tripe-keys' command: `check' reports on keys which will expire