diff --git a/ChangeLog.d/psa_crypto_reduced_configs.txt b/ChangeLog.d/psa_crypto_reduced_configs.txt
new file mode 100644
index 0000000000..5bc9bc10be
--- /dev/null
+++ b/ChangeLog.d/psa_crypto_reduced_configs.txt
@@ -0,0 +1,5 @@
+Changes
+   * Automatically enable MBEDTLS_PK_WRITE_C if MBEDTLS_PK_C and
+     MBEDTLS_USE_PSA_CRYPTO are enabled. This is due to ecdsa_verify_wrap
+     requirements, but will also probably be needed by RSA soon, hence the
+     broader PK_C requirement.