diff --git a/ChangeLog b/ChangeLog
index 23cbbac..20436d7 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,10 +2,14 @@
 
 = PolarSSL 1.3.z branch
 
+Features
+   * Add function pk_check_pair() to test if public and private keys match.
+
 Changes
    * Use deterministic nonces for AEAD ciphers in TLS by default (possible to
      switch back to random with POLARSSL_SSL_AEAD_RANDOM_IV in config.h).
    * Blind RSA private operations even when POLARSSL_RSA_NO_CRT is defined.
+   * ssl_set_own_cert() now returns an error on key-certificate mismatch.
 
 = PolarSSL 1.3.9 released 2014-10-20
 Security