diff --git a/include/mbedtls/check_config.h b/include/mbedtls/check_config.h
index 6eae6a5e5a..c3a38301ca 100644
--- a/include/mbedtls/check_config.h
+++ b/include/mbedtls/check_config.h
@@ -510,6 +510,10 @@
 #error "MBEDTLS_RSA_C defined, but none of the PKCS1 versions enabled"
 #endif
 
+#if defined(MBEDTLS_SHA512_NO_SHA384) && !defined(MBEDTLS_SHA512_C)
+#error "MBEDTLS_SHA512_NO_SHA384 defined without MBEDTLS_SHA512_C"
+#endif
+
 #if defined(MBEDTLS_THREADING_PTHREAD)
 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL)
 #error "MBEDTLS_THREADING_PTHREAD defined, but not all prerequisites"
diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 205c7bec78..585d08776c 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1039,6 +1039,8 @@
  * Disable the SHA-384 option of the SHA-512 module. Use this to save some
  * code size on devices that don't use SHA-384.
  *
+ * Requires: MBEDTLS_SHA512_C
+ *
  * Uncomment to disable SHA-384
  */
 //#define MBEDTLS_SHA512_NO_SHA384