diff --git a/ChangeLog.d/8938.txt b/ChangeLog.d/8938.txt
new file mode 100644
index 000000000..68a1c084b
--- /dev/null
+++ b/ChangeLog.d/8938.txt
@@ -0,0 +1,3 @@
+Bugfix
+   * Fix RSA opaque keys always using PKCS1 v1.5 algorithms instead of the
+     primary algorithm of the wrapped PSA key.