Add NIST keywrap as a cipher mode
Closes #2003 see also #1658
diff --git a/ChangeLog b/ChangeLog
index 3a8e94a..d8fe167 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -41,6 +41,8 @@
* Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
from the default list (enabled by default). See
https://sweet32.info/SWEET32_CCS16.pdf.
+ * It is now possible to use NIST key wrap mode via the mbedtls_cipher API.
+ Contributed by Jack Lloyd and Fortanix Inc.
API Changes
* Add a new X.509 API call `mbedtls_x509_parse_der_nocopy()`.