diff --git a/ChangeLog.d/deprecate_mbedtls_cipher_setup_psa.txt b/ChangeLog.d/deprecate_mbedtls_cipher_setup_psa.txt
new file mode 100644
index 0000000..782b751
--- /dev/null
+++ b/ChangeLog.d/deprecate_mbedtls_cipher_setup_psa.txt
@@ -0,0 +1,3 @@
+New deprecations
+   * Deprecate mbedtls_cipher_setup_psa() function.
+     Use psa_aead_xxx() / psa_cipher_xxx() directly instead.