diff --git a/grub2.changes b/grub2.changes
index f5525e2..5e3360f 100644
--- a/grub2.changes
+++ b/grub2.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Aug 20 05:42:12 UTC 2016 - arvidjaar@gmail.com
+
+- since version 1.7 cryptsetup defaults to SHA256 for LUKS - include
+  gcry_sha256 in signed EFI image
+
 -------------------------------------------------------------------
 Fri Aug 12 08:32:05 UTC 2016 - mchang@suse.com
 
diff --git a/grub2.spec b/grub2.spec
index ac40069..5e88886 100644
--- a/grub2.spec
+++ b/grub2.spec
@@ -535,7 +535,7 @@ CD_MODULES=" all_video boot cat chain configfile echo true \
 		password_pbkdf2 png reboot search search_fs_uuid \
 		search_fs_file search_label sleep test video fat loadenv"
 PXE_MODULES="efinet tftp"
-CRYPTO_MODULES="luks gcry_rijndael gcry_sha1"
+CRYPTO_MODULES="luks gcry_rijndael gcry_sha1 gcry_sha256"
 
 %ifarch x86_64
 CD_MODULES="${CD_MODULES} linuxefi"