diff -ur mbedtls/CMakeLists.txt mbedtls/CMakeLists.txt
--- mbedtls/CMakeLists.txt  2025-10-14 22:56:19.242874400 +0200
+++ mbedtls/CMakeLists.txt  2026-02-25 19:12:48.714720944 +0100
@@ -18,7 +18,7 @@

 # We specify a minimum requirement of 3.10.2, but for now use 3.5.1 here
 # until our infrastructure catches up.
-cmake_minimum_required(VERSION 3.5.1)
+cmake_minimum_required(VERSION 3.10)

 include(CMakePackageConfigHelpers)

--- mbedtls/library/CMakeLists.txt      2026-04-02 21:34:48.534599833 +0200
+++ x   2026-04-02 21:34:17.595551614 +0200
@@ -313,7 +313,7 @@
                     DESTINATION ${CMAKE_INSTALL_LIBDIR}
                     RENAME "libmbedcrypto.dylib"
             )
-        elseif(WIN32 AND NOT CYGWIN)
+        elseif(WIN32 OR CYGWIN)
             add_custom_command(
                 TARGET ${mbedtls_target} POST_BUILD
                 COMMAND ${CMAKE_COMMAND} -E copy_if_different
@@ -361,7 +361,7 @@
                     RENAME "libmbedcrypto.so.${MBEDTLS_VERSION}"
             )
             install(CODE "
-                set(_libdir \"\${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_LIBDIR}\")
+                set(_libdir \"\$ENV{DESTDIR}\${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_LIBDIR}\")

                 execute_process(COMMAND \"\${CMAKE_COMMAND}\" -E create_symlink
                                 \"libmbedcrypto.so.${MBEDTLS_VERSION}\"

diff -ur mbedtls/tf-psa-crypto/CMakeLists.txt mbedtls/tf-psa-crypto/CMakeLists.txt
--- mbedtls/tf-psa-crypto/CMakeLists.txt  2025-10-15 11:10:22.358845700 +0200
+++ mbedtls/tf-psa-crypto/CMakeLists.txt  2026-02-25 19:12:56.890730618 +0100
@@ -18,7 +18,7 @@

 # We specify a minimum requirement of 3.10.2, but for now use 3.5.1 here
 # until our infrastructure catches up.
-cmake_minimum_required(VERSION 3.5.1)
+cmake_minimum_required(VERSION 3.10)

 include(CMakePackageConfigHelpers)
