diff --git a/ChangeLog b/ChangeLog
index f383ae5..240bf84 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,6 @@
 mbed TLS ChangeLog (Sorted per branch, date)
 
-= mbed TLS 1.3.21 branch released xxxx-xx-xx
+= mbed TLS 1.3.21 branch released 2017-08-10
 
 Security
    * Fix authentication bypass in SSL/TLS: when authmode is set to optional,
diff --git a/doxygen/input/doc_mainpage.h b/doxygen/input/doc_mainpage.h
index e49a383..3452e24 100644
--- a/doxygen/input/doc_mainpage.h
+++ b/doxygen/input/doc_mainpage.h
@@ -4,7 +4,7 @@
  */
 
 /**
- * @mainpage mbed TLS v1.3.20 source code documentation
+ * @mainpage mbed TLS v1.3.21 source code documentation
  *
  * This documentation describes the internal structure of mbed TLS.  It was
  * automatically generated from specially formatted comment blocks in
diff --git a/doxygen/mbedtls.doxyfile b/doxygen/mbedtls.doxyfile
index aabc413..9b00327 100644
--- a/doxygen/mbedtls.doxyfile
+++ b/doxygen/mbedtls.doxyfile
@@ -28,7 +28,7 @@
 # identify the project. Note that if you do not use Doxywizard you need
 # to put quotes around the project name if it contains spaces.
 
-PROJECT_NAME           = "mbed TLS v1.3.20"
+PROJECT_NAME           = "mbed TLS v1.3.21"
 
 # The PROJECT_NUMBER tag can be used to enter a project or revision number.
 # This could be handy for archiving the generated documentation or
diff --git a/include/polarssl/version.h b/include/polarssl/version.h
index f2b525d..eb66062 100644
--- a/include/polarssl/version.h
+++ b/include/polarssl/version.h
@@ -40,16 +40,16 @@
  */
 #define POLARSSL_VERSION_MAJOR  1
 #define POLARSSL_VERSION_MINOR  3
-#define POLARSSL_VERSION_PATCH  20
+#define POLARSSL_VERSION_PATCH  21
 
 /**
  * The single version number has the following structure:
  *    MMNNPP00
  *    Major version | Minor version | Patch version
  */
-#define POLARSSL_VERSION_NUMBER         0x01031400
-#define POLARSSL_VERSION_STRING         "1.3.20"
-#define POLARSSL_VERSION_STRING_FULL    "mbed TLS 1.3.20"
+#define POLARSSL_VERSION_NUMBER         0x01031500
+#define POLARSSL_VERSION_STRING         "1.3.21"
+#define POLARSSL_VERSION_STRING_FULL    "mbed TLS 1.3.21"
 
 #if defined(POLARSSL_VERSION_C)
 
diff --git a/library/CMakeLists.txt b/library/CMakeLists.txt
index 5ec4828..7e521ae 100644
--- a/library/CMakeLists.txt
+++ b/library/CMakeLists.txt
@@ -117,7 +117,7 @@
 
 if(USE_SHARED_MBEDTLS_LIBRARY)
 	add_library(mbedtls SHARED ${src})
-	set_target_properties(mbedtls PROPERTIES VERSION 1.3.20 SOVERSION 9)
+	set_target_properties(mbedtls PROPERTIES VERSION 1.3.21 SOVERSION 9)
 
 	target_link_libraries(mbedtls ${libs})
 
diff --git a/tests/suites/test_suite_version.data b/tests/suites/test_suite_version.data
index aaa697a..42c4abb 100644
--- a/tests/suites/test_suite_version.data
+++ b/tests/suites/test_suite_version.data
@@ -1,8 +1,8 @@
 Check compiletime library version
-check_compiletime_version:"1.3.20"
+check_compiletime_version:"1.3.21"
 
 Check runtime library version
-check_runtime_version:"1.3.20"
+check_runtime_version:"1.3.21"
 
 Check for POLARSSL_VERSION_C
 check_feature:"POLARSSL_VERSION_C":0