diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..dcd0c87
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,5 @@
+
+0.1.8 / 2015-01-16
+==================
+
+  * SECURITY: Perform constant time string comparison when validating signatures
diff --git a/Gemfile.lock b/Gemfile.lock
index e0b4d11..f3afcb5 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    signature (0.1.7)
+    signature (0.1.8)
 
 GEM
   remote: https://rubygems.org/
diff --git a/lib/signature/version.rb b/lib/signature/version.rb
index 7d2c041..b38d46c 100644
--- a/lib/signature/version.rb
+++ b/lib/signature/version.rb
@@ -1,3 +1,3 @@
 module Signature
-  VERSION = "0.1.7"
+  VERSION = "0.1.8"
 end