diff --git a/components/mbedtls/Kconfig b/components/mbedtls/Kconfig
index 596f97d9ca..2615a61ce3 100644
--- a/components/mbedtls/Kconfig
+++ b/components/mbedtls/Kconfig
@@ -161,7 +161,7 @@ menu "mbedTLS"
 
     config MBEDTLS_HARDWARE_SHA
         bool "Enable hardware SHA acceleration"
-        default n
+        default y
         help
             Enable hardware accelerated SHA1, SHA256, SHA384 & SHA512 in mbedTLS.