diff --git a/NEWS b/NEWS
index 9cb317283..a69df7e37 100644
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,13 @@ strongswan-5.5.1
   proposed in their 2015 paper by Erdem Alkim, Léo Ducas, Thomas Pöppelmann and
   Peter Schwabe.
 
-- The VICI flush-certs commands flushes certificates from the volatile
+- The libstrongswan crypto factory now offers the registration of Extended
+  Output Functions (XOFs). Currently supported XOFs are SHAKE128 and SHAKE256
+  implemented by the sha3 plugin, ChaCHa20 implemented by the chapoly plugin
+  and the more traditional MGF1 Mask Generation Functions based on the SHA-1,
+  SHA-256 and SHA-512 hash algorithms implemented by the new mgf1 plugin.
+
+- The VICI flush-certs command flushes certificates from the volatile
   certificate cache. Optionally the type of the certificates to be
   flushed  (e.g. type = x509_crl) can be specified.
 
diff --git a/configure.ac b/configure.ac
index 9b65fd99b..9cae4624d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -19,7 +19,7 @@
 #  initialize & set some vars
 # ============================
 
-AC_INIT([strongSwan],[5.5.1dr3])
+AC_INIT([strongSwan],[5.5.1dr4])
 AM_INIT_AUTOMAKE(m4_esyscmd([
 	echo tar-ustar
 	echo subdir-objects
diff --git a/testing/testing.conf b/testing/testing.conf
index c27dbfbb8..deccd6512 100644
--- a/testing/testing.conf
+++ b/testing/testing.conf
@@ -24,14 +24,14 @@ fi
 : ${TESTDIR=/srv/strongswan-testing}
 
 # Kernel configuration
-: ${KERNELVERSION=4.7.2}
+: ${KERNELVERSION=4.7.4}
 : ${KERNEL=linux-$KERNELVERSION}
 : ${KERNELTARBALL=$KERNEL.tar.xz}
 : ${KERNELCONFIG=$DIR/../config/kernel/config-4.7}
 : ${KERNELPATCH=ha-4.4-abicompat.patch.bz2}
 
 # strongSwan version used in tests
-: ${SWANVERSION=5.5.1dr2}
+: ${SWANVERSION=5.5.1dr4}
 
 # Build directory where the guest kernel and images will be built
 : ${BUILDDIR=$TESTDIR/build}