diff --git a/package/libs/mbedtls/Config.in b/package/libs/mbedtls/Config.in
index 65557756ba..22cff75c0f 100644
--- a/package/libs/mbedtls/Config.in
+++ b/package/libs/mbedtls/Config.in
@@ -196,6 +196,16 @@ config MBEDTLS_DEPRECATED_WARNING
 	bool "MBEDTLS_DEPRECATED_WARNING"
 	default n
 
+config MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT
+	bool "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT"
+	default y
+	depends on aarch64 && !TARGET_bcm27xx_bcm2710 && !TARGET_bcm27xx_bcm2711
+
+config MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
+	bool "MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT"
+	default y
+	depends on aarch64 && !TARGET_bcm27xx_bcm2710 && !TARGET_bcm27xx_bcm2711
+
 config MBEDTLS_SSL_PROTO_TLS1_2
 	bool "MBEDTLS_SSL_PROTO_TLS1_2"
 	default y
diff --git a/package/libs/mbedtls/Makefile b/package/libs/mbedtls/Makefile
index ed2e795f70..cab6b702b9 100644
--- a/package/libs/mbedtls/Makefile
+++ b/package/libs/mbedtls/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=mbedtls
 PKG_VERSION:=3.6.2
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 PKG_BUILD_FLAGS:=no-mips16 gc-sections no-lto
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
@@ -79,6 +79,8 @@ MBEDTLS_BUILD_OPTS= \
   CONFIG_MBEDTLS_VERSION_FEATURES \
   CONFIG_MBEDTLS_PSA_CRYPTO_CLIENT \
   CONFIG_MBEDTLS_DEPRECATED_WARNING \
+  CONFIG_MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT \
+  CONFIG_MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT \
   CONFIG_MBEDTLS_SSL_PROTO_TLS1_2 \
   CONFIG_MBEDTLS_SSL_PROTO_TLS1_3 \
   CONFIG_MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE