diff --git a/third_party/mbedtls/mbedtls-config.h b/third_party/mbedtls/mbedtls-config.h
index 28194abd2ce9..bf75c880357a 100644
--- a/third_party/mbedtls/mbedtls-config.h
+++ b/third_party/mbedtls/mbedtls-config.h
@@ -43,14 +43,22 @@
 #define MBEDTLS_PLATFORM_SNPRINTF_MACRO snprintf
 
 #define MBEDTLS_AES_C
+#if (MBEDTLS_VERSION_NUMBER >= 0x03050000)
+#define MBEDTLS_AES_ONLY_128_BIT_KEY_LENGTH
+#endif
 #define MBEDTLS_AES_ROM_TABLES
 #define MBEDTLS_ASN1_PARSE_C
 #define MBEDTLS_ASN1_WRITE_C
 #define MBEDTLS_BIGNUM_C
+#if (MBEDTLS_VERSION_NUMBER >= 0x03050000)
+#define MBEDTLS_BLOCK_CIPHER_NO_DECRYPT
+#endif
 #define MBEDTLS_CCM_C
 #define MBEDTLS_CIPHER_C
 #define MBEDTLS_CMAC_C
 #define MBEDTLS_CTR_DRBG_C
+#define MBEDTLS_DEPRECATED_REMOVED
+#define MBEDTLS_DEPRECATED_WARNING
 #define MBEDTLS_ECJPAKE_C
 #define MBEDTLS_ECP_C
 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED