diff --git a/ChangeLog b/ChangeLog
index f0f0adc..2b51621 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -10,6 +10,11 @@
    * Reduce stack usage of `mpi_write_hlp()` by eliminating recursion.
      Fixes #2190.
 
+Features
+   * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
+     from the default list (enabled by default). See
+     https://sweet32.info/SWEET32_CCS16.pdf.
+
 Changes
    * Include configuration file in all header files that use configuration,
      instead of relying on other header files that they include.
@@ -23,10 +28,6 @@
      by Aurelien Jarno and submitted by Jeffrey Martin.
    * Ciphersuites based on 3DES now have the lowest priority by default.
 
-Features
-   * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
-     from the default list (inactive by default).
-
 = mbed TLS 2.7.9 branch released 2018-12-21
 
 Bugfix