diff --git a/NEWS.md b/NEWS.md
index da09538b4..8227df8fe 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,3 +1,15 @@
+# NEWS for rsync 3.5.0 (UNRELEASED)
+
+## Changes in this version:
+
+### ENHANCEMENTS:
+
+- Added `sha256` to the list of transfer checksum algorithms that can be
+  selected via [`--checksum-choice`](rsync.1#opt) (and negotiated
+  automatically).  It is available when rsync is built with OpenSSL
+  support.
+
+
 # NEWS for rsync 3.4.3 (20 May 2026)
 
 ## Changes in this version:
diff --git a/checksum.c b/checksum.c
index 24e46bfbb..a1f04f2e5 100644
--- a/checksum.c
+++ b/checksum.c
@@ -59,6 +59,9 @@ struct name_num_item valid_checksums_items[] = {
 	{ CSUM_MD4, NNI_BUILTIN|NNI_EVP, "md4", NULL },
 #ifdef SHA_DIGEST_LENGTH
 	{ CSUM_SHA1, NNI_EVP, "sha1", NULL },
+#endif
+#ifdef SHA256_DIGEST_LENGTH
+	{ CSUM_SHA256, NNI_EVP, "sha256", NULL },
 #endif
 	{ CSUM_NONE, 0, "none", NULL },
 	{ 0, 0, NULL, NULL }
diff --git a/rsync.1.md b/rsync.1.md
index fdf0b2e95..7157d2163 100644
--- a/rsync.1.md
+++ b/rsync.1.md
@@ -1804,6 +1804,7 @@ expand it.
     - `md5`
     - `md4`
     - `sha1`
+    - `sha256`
     - `none`
 
     Run `rsync --version` to see the default checksum list compiled into your