diff options
| -rw-r--r-- | doc/download.rst | 6 | ||||
| -rw-r--r-- | doc/relnotes/1_10_4.rst | 17 | ||||
| -rw-r--r-- | doc/relnotes/index.rst | 1 |
3 files changed, 21 insertions, 3 deletions
diff --git a/doc/download.rst b/doc/download.rst index c9e6d5982..70704be3c 100644 --- a/doc/download.rst +++ b/doc/download.rst @@ -30,9 +30,9 @@ Current Stable Series (1.10) ---------------------------------------- The latest version of the current stable series, from branch -``net.randombit.botan.1_10``, is :doc:`relnotes/1_10_3`: -:tgz:`1.10.3` (:tgz_sig:`sig <1.10.3>`), -:tbz:`1.10.3` (:tbz_sig:`sig <1.10.3>`) +``net.randombit.botan.1_10``, is :doc:`relnotes/1_10_4`: +:tgz:`1.10.4` (:tgz_sig:`sig <1.10.4>`), +:tbz:`1.10.4` (:tbz_sig:`sig <1.10.4>`) Windows Installer ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ diff --git a/doc/relnotes/1_10_4.rst b/doc/relnotes/1_10_4.rst new file mode 100644 index 000000000..14d1fb0f8 --- /dev/null +++ b/doc/relnotes/1_10_4.rst @@ -0,0 +1,17 @@ +Version 1.10.4, 2013-01-07 +^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ + +* Avoid a conditional operation in the power mod implementations on if + a nibble of the exponent was zero or not. This may help protect + against certain forms of side channel attacks. + +* The SRP6 code was checking for invalid values as specified in RFC + 5054, specifically values equal to zero mod p. However SRP would + accept negative A/B values, or ones larger than p, neither of which + should occur in a normal run of the protocol. These values are now + rejected. Credits to Timothy Prepscius for pointing out these values + are not normally used and probably signal something fishy. + +* The return value of version_string is now a compile time constant + string, so version information can be more easily extracted from + binaries. diff --git a/doc/relnotes/index.rst b/doc/relnotes/index.rst index e9fca6116..2de2adee3 100644 --- a/doc/relnotes/index.rst +++ b/doc/relnotes/index.rst @@ -17,6 +17,7 @@ Series 1.10 .. toctree:: + 1_10_4 1_10_3 1_10_2 1_10_1 |