diff --git a/CHANGES b/CHANGES
index c7fd85e3e0941016125f4a7f325e3162d30f6ef6..327ef8f33d8ef29ba90fb661c319aada773c6ade 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,16 +1,20 @@
+2013.56
+
 - Allow specifying cipher (-c) and MAC (-m) lists for dbclient
 
-- Allow using 'none' cipher or MAC
+- Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
+  is used during authentication then disabled, similar to OpenSSH HPN mode
 
 - Allow a user in immediately if the account has a blank password and blank
   passwords are enabled
 
 - Include a few extra sources of entropy from /proc on Linux, hash private keys
-  as well
+  as well. Dropbear will also write gathered entropy back into /dev/urandom
 
-- Added sha2-256 and sha2-512 hashes
+- Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
 
-- Don't sent "localhost" for -R forward connections, reported by Denis Bider
+- Don't sent bad address "localhost" for -R forward connections, 
+  reported by Denis Bider
 
 - Add "-B" runtime option to allow blank passwords
 
@@ -21,6 +25,10 @@
 - Fix memory leak for TCP forwarded connections to hosts that timed out,
   reported by Norbert Benczúr. Appears to be a very long-standing bug.
 
+- Fix "make clean" for out of tree builds
+
+- Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset
+
 2012.55 - Wednesday 22 February 2012
 
 - Security: Fix use-after-free bug that could be triggered if command="..."
diff --git a/debian/changelog b/debian/changelog
index acd9ec4112faeb3b52b2375d7729f24f70198000..7b1762077acf645931d1f750938e7ef9253cc339 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+dropbear (2013.56-0.1) unstable; urgency=low
+
+  * New upstream release.
+
+ -- Matt Johnston <matt@ucc.asn.au>  Thu, 21 Mar 2013 22:54:00 +0800
+
 dropbear (2012.55-0.1) unstable; urgency=low
 
   * New upstream release.
diff --git a/sysoptions.h b/sysoptions.h
index 3d542356243823f9e48f1e05c1838c5276a74f2b..2d93e7b2a2ea3bd60bf54b7fafddb76f48727760 100644
--- a/sysoptions.h
+++ b/sysoptions.h
@@ -4,7 +4,7 @@
  *******************************************************************/
 
 #ifndef DROPBEAR_VERSION
-#define DROPBEAR_VERSION "2012.55"
+#define DROPBEAR_VERSION "2013.56"
 #endif
 
 #define LOCAL_IDENT "SSH-2.0-dropbear_" DROPBEAR_VERSION