diff --git a/NEWS b/NEWS
index 5beefb739..82aab545b 100644
--- a/NEWS
+++ b/NEWS
@@ -17,6 +17,9 @@ strongswan-4.6.3
 - Added support for untruncated MD5 and SHA1 HMACs in ESP as used in
   RFC 4595.
 
+- The cmac plugin implements the AES-CMAC-96 and AES-CMAC-PRF-128 algorithms
+  as defined in RFC 4494 and RFC 4615, respectively.
+
 - The resolve plugin automatically installs nameservers via resolveconf(8),
   if it is installed, instead of modifying /etc/resolv.conf directly.