Disable debug messages that can introduce a timing side channel. Introduced the POLARSSL_SSL_DEBUG_ALL flag to enable all these debug messages in case somebody does want to see the reason checks fail.
diff --git a/ChangeLog b/ChangeLog index 34943dc..c6f90a2 100644 --- a/ChangeLog +++ b/ChangeLog
@@ -3,6 +3,8 @@ = Development Changes * Allow enabling of dummy error_strerror() to support some use-cases + * Debug messages about padding errors during SSL message decryption are + disabled by default and can be enabled with POLARSSL_SSL_DEBUG_ALL Security * Removed timing differences during SSL message decryption in