@table @strong
+@anchor{Release 5.1.1}
+@item 5.1.1
+ Tarball uses vendoring, instead of @env{GOPATH} overriding.
+ As minimal Go version is 1.12 for a long time, it supports modules.
+
+@anchor{Release 5.1.0}
+@item 5.1.0
+ @code{gost3410/KEK*} functions do not alter @code{ukm} argument.
+ It is safe to reuse now.
+
+@anchor{Release 5.0.0}
+@item 5.0.0
+ Backward incompatible remove of excess misleading @code{gost3410.Mode}
+ from all related functions. Point/key sizes are determined by
+ looking at curve's parameters size.
+
+@anchor{Release 4.3.0}
+@item 4.3.0
+ @strong{Fixed} nasty bug with Edwards curves using in 34.10-VKO
+ functions: curve's cofactor has not been used.
+
+@anchor{Release 4.2.4}
+@item 4.2.4
+ @code{gost3410.PrivateKeyReverseDigest} reversed digests and
+ @code{PrivateKeyReverseDigestAndSignature} with also reversed signatures
+ signers appeared for convenience.
+
+@anchor{Release 4.2.3}
+@item 4.2.3
+ Panic on all possible hash @code{Write} errors.
+
+@anchor{Release 4.2.2}
+@item 4.2.2
+ More 34.10-2012 test vectors.
+
+@anchor{Release 4.2.1}
+@item 4.2.1
+ Dummy release. More nicer tarballs.
+
+@anchor{Release 4.2.0}
+@item 4.2.0
+ @itemize
+ @item @code{PRF_IPSEC_PRFPLUS_GOSTR3411_2012_@{256,512@}} implementation
+ @item Generic @code{prf+} function (taken from IKEv2
+ (@url{https://tools.ietf.org/html/rfc5831.html, RFC 7296}))
+ @end itemize
+
+@anchor{Release 4.1.0}
+@item 4.1.0
+ @itemize
+ @item @code{ESPTREE}/@code{IKETREE} implementation
+ @item @code{CurveIdtc26gost34102012256paramSetB},
+ @code{CurveIdtc26gost34102012256paramSetC},
+ @code{CurveIdtc26gost34102012256paramSetD} curve aliases
+ @item Forbid any later GNU GPL version autousage
+ (project's licence now is GNU GPLv3 only)
+ @item Project now is @command{go get}-able and uses
+ @code{go.cypherpunks.ru} namespace:
+ @command{go get go.cypherpunks.ru/gogost},
+ @command{go get go.cypherpunks.ru/gogost/cmd/streebog@{256,512@}}
+ @end itemize
+
+@anchor{Release 4.0}
+@item 4.0
+ @itemize
+ @item Backward incompatible change: all keys passing to encryption
+ functions are slices now, not the fixed arrays. That heavily
+ simplifies the library usage
+ @item Fix bug with overwriting IVs memory in @code{gost28147.CFB*crypter}
+ @item @code{TLSTREE}, used in TLS 1.[23], implementation
+ @item @code{gost3410.KEK2012*} can be used with any curves, not only 512-bit ones
+ @item @code{gost3410.PrivateKey} satisfies @code{crypto.Signer} interface
+ @item @code{gost34112012*} hashes satisfy @code{encoding.Binary(Un)Marshaler}
+ @item Streebog256 HKDF test vectors
+ @end itemize
+
@anchor{Release 3.0}
@item 3.0
@itemize