PSA PAKE wasn't in 2.28

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
diff --git a/ChangeLog.d/announce-4.0-removals.txt b/ChangeLog.d/announce-4.0-removals.txt
index 49dbf80..bf941e2 100644
--- a/ChangeLog.d/announce-4.0-removals.txt
+++ b/ChangeLog.d/announce-4.0-removals.txt
@@ -27,8 +27,8 @@
      - Asymmetric cryptography: bignum.h, dhm.h, ecdh.h, ecdsa.h, ecjpake.h,
        ecp.h, rsa.h.
      The cryptographic mechanisms remain present, but they will only be
-     accessible via the PSA API (psa_xxx functions introduced before
-     Mbed TLS 2.28.0) and, where relevant, PK.
+     accessible via the PSA API (psa_xxx functions introduced gradually
+     starting with Mbed TLS 2.17) and, where relevant, `pk.h`.
      For guidance on migrating application code to the PSA API, please consult
      the PSA transition guide (docs/psa-transition.md).
    * The following integration interfaces are planned to be removed