diff --git a/ChangeLog.d/driver-only-hashes.txt b/ChangeLog.d/driver-only-hashes.txt
index 930aadfef..6ccd199ba 100644
--- a/ChangeLog.d/driver-only-hashes.txt
+++ b/ChangeLog.d/driver-only-hashes.txt
@@ -1,8 +1,8 @@
 Features
    * Some modules can now use PSA drivers for hashes, including with no
      built-in implementation present, but only in some configurations.
-     - RSA PKCS#1 v2.1, PKCS5, PKCS12 and EC J-PAKE now use hashes from PSA
-       when (and only when) MBEDTLS_MD_C is disabled.
+     - RSA OAEP and PSS (PKCS#1 v2.1), PKCS5, PKCS12 and EC J-PAKE now use
+       hashes from PSA when (and only when) MBEDTLS_MD_C is disabled.
      - PEM parsing of encrypted files now uses MD-5 from PSA when (and only
        when) MBEDTLS_MD5_C is disabled.
      See the documentation of the corresponding macros in mbedtls_config.h for
diff --git a/include/mbedtls/mbedtls_config.h b/include/mbedtls/mbedtls_config.h
index b16a5b4d4..0688073b1 100644
--- a/include/mbedtls/mbedtls_config.h
+++ b/include/mbedtls/mbedtls_config.h
@@ -1147,7 +1147,7 @@
  * before doing any PKCS#1 v2.1 operation.
  *
  * \warning When building with MBEDTLS_MD_C, all hashes used with this
- * need to be available a built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
+ * need to be available as built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
  * etc.) as opposed to just PSA drivers. So far, PSA drivers are only used by
  * this module in builds where MBEDTLS_MD_C is disabled.
  *
@@ -2440,7 +2440,7 @@
  * before doing any EC J-PAKE operations.
  *
  * \warning When building with MBEDTLS_MD_C, all hashes used with this
- * need to be available a built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
+ * need to be available as built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
  * etc.) as opposed to just PSA drivers. So far, PSA drivers are only used by
  * this module in builds where MBEDTLS_MD_C is disabled.
  */
@@ -2788,7 +2788,7 @@
  * before doing any PKCS5 operation.
  *
  * \warning When building with MBEDTLS_MD_C, all hashes used with this
- * need to be available a built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
+ * need to be available as built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
  * etc.) as opposed to just PSA drivers. So far, PSA drivers are only used by
  * this module in builds where MBEDTLS_MD_C is disabled.
  *
@@ -2812,7 +2812,7 @@
  * before doing any PKCS12 operation.
  *
  * \warning When building with MBEDTLS_MD_C, all hashes used with this
- * need to be available a built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
+ * need to be available as built-ins (that is, for SHA-256, MBEDTLS_SHA256_C,
  * etc.) as opposed to just PSA drivers. So far, PSA drivers are only used by
  * this module in builds where MBEDTLS_MD_C is disabled.
  *