From 5a234e8718741a660aec8d9ec718b0f6e0434b2e Mon Sep 17 00:00:00 2001
From: Hanno Becker <hanno.becker@arm.com>
Date: Mon, 24 May 2021 11:15:29 +0100
Subject: [PATCH] Add ChangeLog entry

Signed-off-by: Hanno Becker <hanno.becker@arm.com>
---
 ChangeLog.d/key-export.txt | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 ChangeLog.d/key-export.txt

diff --git a/ChangeLog.d/key-export.txt b/ChangeLog.d/key-export.txt
new file mode 100644
index 000000000..5882d231e
--- /dev/null
+++ b/ChangeLog.d/key-export.txt
@@ -0,0 +1,8 @@
+API changes
+   * mbedtls_ssl_conf_export_keys_ext_cb() has been removed.
+   * The signature of key export callbacks configured via
+     mbedtls_ssl_conf_export_keys_cb() has changed, and raw
+     keys and IVs are no longer exported. Further, callbacks
+     now receive an additional parameter indicating the type
+     of secret that's being exported, paving the way for the
+     larger number of secrets in TLS 1.3.