diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,99 @@
+# Change Log
+
+## [Unreleased]
+
+
+## [0.4.3.3]
+### Added
+- Changelog.
+
+### Changed
+- Fixed dependencies' bounds.
+
+## [0.4.3.2] - 2016-02-02
+### Changed
+- Fixed dependencies' bounds.
+
+## [0.4.3.1] - 2016-01-30
+### Changed
+- Fixed dependencies' bounds.
+
+## [0.4.3]   - 2016-01-30
+### Changed
+- Fixed draining of `/dev/random`.
+- Refactored the example.
+
+## [0.4.2.1] - 2016-01-17
+### Changed
+- Fixed dependencies' bounds.
+
+## [0.4.2]   - 2016-12-23
+### Added
+- `removeSession` function.
+
+## [0.4.0]   - 2016-09-25
+### Added
+- Support for `servant-0.9`.
+- Tags for bytestrings.
+
+### Changed
+- Switched to `base-compat`.
+
+## [0.3.2]   - 2016-09-17
+### Added
+- `mkServerKeyFromBytes` function.
+
+## [0.3.1]   - 2016-08-19
+### Added
+- `addSessionToErr` function.
+
+## [0.3.0.3] - 2016-08-12
+### Changed
+- Fixed dependencies' bounds.
+
+## [0.3.0.2] - 2016-08-04
+### Changed
+- Fixed dependencies' bounds.
+
+## [0.3.0]   - 2016-07-27
+### Changed
+- Relicensed to `BSD3`
+- The great and glorious refactoring of everything ;)
+
+## [0.2.0]   - 2016-07-08
+### Added
+- Parameters:
+  - hash algorithm
+  - encryption/decryption algorithms
+  - ...and many others.
+- Tests
+- Documentation
+
+### Changed
+- `RandomKey` and `ServerKey` initialization (without `unsafePerformIO`).
+
+## [0.1.0.1] - 2016-06-15
+### Changed
+- More user-friendly example.
+
+## 0.1.0     - 2016-06-05
+### Added
+- Initial version of the package.
+
+
+[HEAD]:    ../../compare/v0.4.3.3...HEAD
+[0.4.3.3]: ../../compare/v0.4.3.2...v0.4.3.3
+[0.4.3.2]: ../../compare/v0.4.3.1...v0.4.3.2
+[0.4.3.1]: ../../compare/v0.4.3...v0.4.3.1
+[0.4.3]:   ../../compare/v0.4.2.1...v0.4.3
+[0.4.2.1]: ../../compare/v0.4.2...v0.4.2.1
+[0.4.2]:   ../../compare/v0.4.0...v0.4.2
+[0.4.0]:   ../../compare/v0.3.2...v0.4.0
+[0.3.2]:   ../../compare/v0.3.1...v0.3.2
+[0.3.1]:   ../../compare/v0.3.0.3...v0.3.1
+[0.3.0.3]: ../../compare/v0.3.0.2...v0.3.0.3
+[0.3.0.2]: ../../compare/v0.3.0...v0.3.0.2
+[0.3.0]:   ../../compare/v0.2.0...v0.3.0
+[0.2.0]:   ../../compare/v0.1.0.1...v0.2.0
+[0.1.0.1]: ../../compare/v0.1.0...v0.1.0.1
+
diff --git a/servant-auth-cookie.cabal b/servant-auth-cookie.cabal
--- a/servant-auth-cookie.cabal
+++ b/servant-auth-cookie.cabal
@@ -1,5 +1,5 @@
 name:                servant-auth-cookie
-version:             0.4.3.2
+version:             0.4.3.3
 synopsis:            Authentication via encrypted cookies
 description:         Authentication via encrypted client-side cookies,
                      inspired by client-session library by Michael Snoyman and based on
@@ -13,6 +13,9 @@
 build-type:          Simple
 cabal-version:       >=1.10
 
+extra-source-files:
+  CHANGELOG.md
+
 source-repository head
   type:     git
   location: https://github.com/zohl/servant-auth-cookie.git
@@ -42,7 +45,7 @@
                , bytestring
                , cereal         >= 0.5   && < 0.6
                , cookie         >= 0.4.1 && < 0.5
-               , cryptonite     >= 0.14  && < 0.22
+               , cryptonite     >= 0.14  && < 0.23
                , data-default
                , exceptions     >= 0.8   && < 0.9
                , http-types     >= 0.9   && < 0.10
@@ -84,7 +87,7 @@
                , QuickCheck     >= 2.4  && < 3.0
                , bytestring
                , cereal         >= 0.5  && < 0.6
-               , cryptonite     >= 0.14 && < 0.22
+               , cryptonite     >= 0.14 && < 0.23
                , data-default
                , deepseq        >= 1.3  && < 1.5
                , hspec          >= 2.0  && < 3.0
@@ -107,7 +110,7 @@
                  , blaze-markup   >= 0.7  && < 0.9
                  , bytestring
                  , cereal         >= 0.5  && < 0.6
-                 , cryptonite     >= 0.14 && < 0.22
+                 , cryptonite     >= 0.14 && < 0.23
                  , data-default
                  , exceptions
                  , http-media
@@ -150,7 +153,7 @@
   build-depends: base           >= 4.7     && < 5.0
                , bytestring
                , criterion      >= 0.6.2.1 && < 1.2
-               , cryptonite     >= 0.14    && < 0.22
+               , cryptonite     >= 0.14    && < 0.23
                , servant-auth-cookie
                , servant-server >= 0.5     && < 0.11
   if flag(dev)