+@anchor{Release 5.10.0}
+@item 5.10.0
+ @itemize
+ @item @code{mgm.MGM.Open} returns @code{mgm.InvalidTag} for failed authentication
+ @item Example @file{cmd/cer-dane-hash} and
+ @file{cmd/cer-selfsigned-example} utilities appeared
+ @end itemize
+
+@anchor{Release 5.9.1}
+@item 5.9.1
+Updated and cleaned up @file{go.sum}.
+
+@anchor{Release 5.9.0}
+@item 5.9.0
+@code{gost3410} is more thread-safe.
+
+@anchor{Release 5.8.0}
+@item 5.8.0
+Faster Kuznechik and ~3x faster Kuznechik-MGM.
+
+@anchor{Release 5.7.0}
+@item 5.7.0
+Go 1.17 requires @code{gost3410.PublicKey} to have @code{Equal} method.
+
+@anchor{Release 5.6.0}
+@item 5.6.0
+ @itemize
+ @item Add @code{gost3410.CurveIdtc26gost341012512paramSetTest} curve
+ @item More curve aliases:
+@verbatim
+CurveIdGostR34102001CryptoProAParamSet -> CurveIdtc26gost341012256paramSetB
+CurveIdGostR34102001CryptoProBParamSet -> CurveIdtc26gost341012256paramSetC
+CurveIdGostR34102001CryptoProCParamSet -> CurveIdtc26gost341012256paramSetD
+CurveIdGostR34102001CryptoProXchAParamSet -> CurveIdGostR34102001CryptoProAParamSet
+CurveIdGostR34102001CryptoProXchBParamSet -> CurveIdGostR34102001CryptoProCParamSet
+CurveIdtc26gost34102012256paramSetA -> CurveIdtc26gost341012256paramSetA
+CurveIdtc26gost34102012256paramSetB -> CurveIdtc26gost341012256paramSetB
+CurveIdtc26gost34102012256paramSetC -> CurveIdtc26gost341012256paramSetC
+CurveIdtc26gost34102012256paramSetD -> CurveIdtc26gost341012256paramSetD
+CurveIdtc26gost34102012512paramSetTest -> CurveIdtc26gost341012512paramSetTest
+CurveIdtc26gost34102012512paramSetA -> CurveIdtc26gost341012512paramSetA
+CurveIdtc26gost34102012512paramSetB -> CurveIdtc26gost341012512paramSetB
+CurveIdtc26gost34102012512paramSetC -> CurveIdtc26gost341012512paramSetC
+@end verbatim
+ @end itemize
+
+@anchor{Release 5.5.0}
+@item 5.5.0
+ @code{gost3410.PrivateKey} is in @code{gost3410.Curve.Q} now. That
+ makes them more friendly with some implementations.
+
+@anchor{Release 5.4.0}
+@item 5.4.0
+ Even slightly less allocations in Streebog.
+
+@anchor{Release 5.3.0}
+@item 5.3.0
+ ~16x speedup of Streebog, ~15x speedup of Kuznechik.
+
+@anchor{Release 5.2.0}
+@item 5.2.0
+ MGM does not panic when short (tagless) message is verified.
+
+@anchor{Release 5.1.1}
+@item 5.1.1
+ Tarball uses vendoring, instead of @env{GOPATH} overriding.
+ As minimal Go version is 1.12 for a long time, it supports modules.
+