diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 49fa597..db40dbf 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -251,6 +251,9 @@
 //#define MBEDTLS_SHA1_PROCESS_ALT
 //#define MBEDTLS_SHA256_PROCESS_ALT
 //#define MBEDTLS_SHA512_PROCESS_ALT
+//#define MBEDTLS_DES_SETKEY_ALT
+//#define MBEDTLS_DES_CRYPT_ECB_ALT
+//#define MBEDTLS_DES3_CRYPT_ECB_ALT
 
 /**
  * \def MBEDTLS_AES_ROM_TABLES
diff --git a/include/mbedtls/des.h b/include/mbedtls/des.h
index 55ca455..af89979 100644
--- a/include/mbedtls/des.h
+++ b/include/mbedtls/des.h
@@ -271,6 +271,16 @@
                      unsigned char *output );
 #endif /* MBEDTLS_CIPHER_MODE_CBC */
 
+/**
+ * \brief          Internal function for key expansion.
+ *                 (Only exposed to allow overriding it,
+ *                 see MBEDTLS_DES_SETKEY_ALT)
+ *
+ * \param SK       Round keys
+ * \param key      Base key
+ */
+void mbedtls_des_setkey( uint32_t SK[32],
+                         const unsigned char key[MBEDTLS_DES_KEY_SIZE] );
 #ifdef __cplusplus
 }
 #endif