diff --git a/ChangeLog.rst b/ChangeLog.rst
index f948ca2..92d779b 100644
--- a/ChangeLog.rst
+++ b/ChangeLog.rst
@@ -1,3 +1,16 @@
+wolfCrypt-py Release 5.8.4 (Jan 7, 2026)
+==========================================
+
+* Add support for HKDF
+* Add support for AES-SIV
+* Fix Windows build for ML-KEM, ML-DSA, and SHAKE
+* Fix header parsing in build_ffi.py for feature detection logic
+* Improve support for minimal wolfSSL configurations
+* Fix function availability detection for RSA and ASN features
+* Detect ML-KEM availability for USE_LOCAL_WOLFSSL
+* Update to wolfSSL version 5.8.4
+
+
 wolfCrypt-py Release 5.8.2 (Jul 24, 2025)
 ==========================================
 
diff --git a/lib/wolfssl b/lib/wolfssl
index decea12..59f4fa5 160000
--- a/lib/wolfssl
+++ b/lib/wolfssl
@@ -1 +1 @@
-Subproject commit decea12e223869c8f8f3ab5a53dc90b69f436eb2
+Subproject commit 59f4fa568615396fbf381b073b220d1e8d61e4c2
diff --git a/wolfcrypt/_version.py b/wolfcrypt/_version.py
index 941ec6e..7a7fe33 100644
--- a/wolfcrypt/_version.py
+++ b/wolfcrypt/_version.py
@@ -1,6 +1,6 @@
 # When bumping the C library version, reset the POST count to 0
 
-__wolfssl_version__ = "v5.8.2-stable"
+__wolfssl_version__ = "v5.8.4-stable"
 
 # We're using implicit post releases [PEP 440] to bump package version
 # while maintaining the C library version intact for better reference.
@@ -8,5 +8,5 @@
 #
 # MAJOR.MINOR.BUILD-POST
 
-__version__ = "5.8.2-0"
+__version__ = "5.8.4-0"