diff --git a/ChangeLog.d/safer-ct.txt b/ChangeLog.d/safer-ct.txt new file mode 100644 index 000000000..0a5b632ab --- /dev/null +++ b/ChangeLog.d/safer-ct.txt @@ -0,0 +1,6 @@ +Security + * Updates to constant-time C code so that compilers are less likely to use + conditional instructions, which can have an observable difference in + timing. (Clang has been seen to do this.) Also introduce assembly + implementations for 32- and 64-bit Arm and for x86 and x86-64, which are + guaranteed not to use conditional instructions.