diff --git a/ChangeLog.d/tls13-psa_crypto_init.txt b/ChangeLog.d/tls13-psa_crypto_init.txt
index 1b188b698b..311db65585 100644
--- a/ChangeLog.d/tls13-psa_crypto_init.txt
+++ b/ChangeLog.d/tls13-psa_crypto_init.txt
@@ -2,3 +2,8 @@ Bugfix
    * Fix TLS connections failing when the handshake selects TLS 1.3
      in an application that does not call psa_crypto_init().
      Fixes #9072.
+
+Changes
+   * A TLS handshake may now call psa_crypto_init() if TLS 1.3 is enabled.
+     This can happen even if TLS 1.3 is offered but eventually not selected
+     in the protocol version negotiation.