Add new program dhparam and update docs.
diff --git a/CHANGES b/CHANGES
index 563ee21..b1bb986 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,14 +4,21 @@
 
  Changes between 0.9.4 and 0.9.5  [xx XXX 1999]
 
-  *) Apply Lutz Jaenicke's 56bit cipher patch. This should fix the problems with cipher
-     ordering and the new EXPORT1024 ciphers. Only two minor changes have been
-     made, the error reason codes have been altered and the @STRENGTH sorting
-     behaviour changed so eNULL ciphers are also sorted (if present).
+  *) Merge the functionality of "dh" and "gendh" programs into a new program
+     "dhparam". The old programs are retained for now but will handle DH keys
+     (instead of parameters) in future.
+     [Steve Henson]
+
+  *) Apply Lutz Jaenicke's 56bit cipher patch. This should fix the problems
+     with cipher ordering and the new EXPORT1024 ciphers. Only two minor
+     changes have been made, the error reason codes have been altered and the
+     @STRENGTH sorting behaviour changed so eNULL ciphers are also sorted
+     (if present).
 
      One other addition: the "ciphers" program didn't check the return code
      of SSL_CTX_set_cipher_list().
-     [Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE>, minor changes by Steve Henson]
+     [Lutz Jaenicke <Lutz.Jaenicke@aet.TU-Cottbus.DE> modified by Steve Henson]
+
   *) Minor change to 'x509' utility. The -CAcreateserial option now uses 1
      for the first serial number and places 2 in the serial number file. This
      avoids problems when the root CA is created with serial number zero and