Reduce priority of 3DES ciphersuites
diff --git a/ChangeLog b/ChangeLog
index 07cc876..f0f0adc 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -21,6 +21,11 @@
produced by some optimizing compilers, showing up as failures in
e.g. RSA or ECC signature operations. Reported in #1722, fix suggested
by Aurelien Jarno and submitted by Jeffrey Martin.
+ * Ciphersuites based on 3DES now have the lowest priority by default.
+
+Features
+ * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
+ from the default list (inactive by default).
= mbed TLS 2.7.9 branch released 2018-12-21