diff --git a/ChangeLog.d/ffdh-peerkey-check.txt b/ChangeLog.d/ffdh-peerkey-check.txt
new file mode 100644
index 0000000000..fe54fae7cf
--- /dev/null
+++ b/ChangeLog.d/ffdh-peerkey-check.txt
@@ -0,0 +1,6 @@
+Security
+   * Fix missing validation of the peer's key in key agreement operations using
+     PSA_ALG_FFDH: low-order elements were not rejected as they should be. This
+     is a problem for protocols using FFDH that expect contributory behaviour,
+     that is, where neither party should be able to force the shared secret
+     into a small set. Found and reported by Kai Tian.