diff --git a/ChangeLog.d/external-wrapped-keys.txt b/ChangeLog.d/external-wrapped-keys.txt
new file mode 100644
index 0000000000..ca29e0dab2
--- /dev/null
+++ b/ChangeLog.d/external-wrapped-keys.txt
@@ -0,0 +1,4 @@
+Bugfix
+   * Fixes a bug where, if the library was configured to include support for
+     both the old SE interface and the new PSA driver interface, external keys were
+     not loaded from storage. This was fixed by #3996.