From 6e0a9786637d649b48aae0e611a12e12beef9b3b Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Mon, 29 Jul 2013 15:09:33 +0200 Subject: Implement deterministic ECDSA as specified by rfc-6979. * cipher/ecc.c (sign): Add args FLAGS and HASHALGO. Convert an opaque MPI as INPUT. Implement rfc-6979. (ecc_sign): Remove the opaque MPI code and pass FLAGS to sign. (verify): Do not allocate and compute Y; it is not used. (ecc_verify): Truncate the hash value if needed. * tests/dsa-rfc6979.c (check_dsa_rfc6979): Add ECDSA test cases. Signed-off-by: Werner Koch --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 508b943d..ee737f97 100644 --- a/NEWS +++ b/NEWS @@ -19,6 +19,11 @@ Noteworthy changes in version 1.6.0 (unreleased) * Added support for the SCRYPT algorithm. + * Mitigate the Yarom/Falkner flush+reload side-channel attack on RSA + secret keys. See [CVE-2013-4242]. + + * Support Deterministic DSA as per RFC-6969. + * Interface changes relative to the 1.5.0 release: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ gcry_ac_* REMOVED. -- cgit v1.2.1