diff --git a/OpenCL/m02500.cl b/OpenCL/m02500.cl
index d4f27c901..ee0f5e46b 100644
--- a/OpenCL/m02500.cl
+++ b/OpenCL/m02500.cl
@@ -893,6 +893,7 @@ __kernel void m02500_comp (__global pw_t *pws, __global const kernel_rule_t *rul
 
     t = swap32_S (t);
 
+    t -= nonce_error_corrections / 2;
     t += nonce_error_correction;
 
     t = swap32_S (t);
@@ -1134,6 +1135,7 @@ __kernel void m02500_comp (__global pw_t *pws, __global const kernel_rule_t *rul
   {
     u32 t = to;
 
+    t -= nonce_error_corrections / 2;
     t += nonce_error_correction;
 
     if (wpa->nonce_compare < 0)
diff --git a/docs/changes.txt b/docs/changes.txt
index 63f2760a4..4131e4f05 100644
--- a/docs/changes.txt
+++ b/docs/changes.txt
@@ -1,5 +1,10 @@
 * changes v3.6.0 -> xxx:
 
+##
+## Improvements
+##
+
+- WPA cracking: Improved nonce-error-corrections mode to use a both positive and negative corrections
 
 * changes v3.5.0 -> v3.6.0: