diff options
| author | lloyd <[email protected]> | 2014-04-10 14:01:17 +0000 |
|---|---|---|
| committer | lloyd <[email protected]> | 2014-04-10 14:01:17 +0000 |
| commit | 5dc3912cc5cc11ef48c08c608c5724b25413c861 (patch) | |
| tree | 0e9d0d14c59402d2383a50246135fc68fb22e38a /doc | |
| parent | da2efcb6e07677cc8b0860508efb5d07c4f8171d (diff) | |
Fix a bug in Miller-Rabin primality testing introduced in 1.8.3
where we chose a single random nonce and tested it repeatedly, rather
than choosing new nonces each time. Reported by Jeff Marrison.
Also remove a pointless comparison (also pointed out by Jeff) and add
an initial test using a witness of 2.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/relnotes/1_11_9.rst | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/doc/relnotes/1_11_9.rst b/doc/relnotes/1_11_9.rst index de88987eb..9bbeb1ba4 100644 --- a/doc/relnotes/1_11_9.rst +++ b/doc/relnotes/1_11_9.rst @@ -1,6 +1,13 @@ -Version 1.11.9, Not Yet Released +Version 1.11.9, 2014-04-10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + * Fix a bug in primality testing introduced in 1.8.3 which caused + only a single random base, rather than a sequence of random bases, + to be used in the Miller-Rabin test. This increased the probability + that a non-prime would be accepted, for instance a 1024 bit number + would be incorrectly classed as prime with probability around + 2^-40. Reported by Jeff Marrison. + * X.509 path validation now returns a set of all errors that occurred during validation, rather than immediately returning the first detected error. This prevents a seemingly innocuous error (such as |