diff --git a/docs/architecture/psa-migration/md-cipher-dispatch.md b/docs/architecture/psa-migration/md-cipher-dispatch.md
index 12b486a46..11c5f21fb 100644
--- a/docs/architecture/psa-migration/md-cipher-dispatch.md
+++ b/docs/architecture/psa-migration/md-cipher-dispatch.md
@@ -513,9 +513,9 @@ testing, based and what's needed by internal users of Cipher light. The new
 config symbol will not be considered public so its definition may change.
 
 Cipher light will be automatically enabled in `build_info.h` by modules that
-need it, namely: CTR\_DRBG, CCM, GCM. Note: CCM and GCM currently depend on
-the full `CIPHER_C` (enforced by `check_config.h`); this hard dependency would
-be replaced by the above auto-enablement.
+need it, namely: CCM, GCM. Note: CCM and GCM currently depend on the full
+`CIPHER_C` (enforced by `check_config.h`); this hard dependency would be
+replaced by the above auto-enablement.
 
 Cipher light includes:
 - info functions;
@@ -533,27 +533,21 @@ This excludes:
 The following API functions, and supporting types, are candidates for
 inclusion in the Cipher light API, with limited features as above:
 ```
-mbedtls_cipher_info_from_type
+mbedtls_cipher_info_from_values
 mbedtls_cipher_info_get_block_size
 
 mbedtls_cipher_init
 mbedtls_cipher_setup
 mbedtls_cipher_setkey
-mbedtls_cipher_crypt
 mbedtls_cipher_free
 
 mbedtls_cipher_update
-(mbedtls_cipher_finish)
 ```
 
 Note: `mbedtls_cipher_info_get_block_size()` can be hard-coded to return 16,
 as all three supported block ciphers have the same block size (DES was
 excluded).
 
-Note: `mbedtls_cipher_finish()` is not required by any of the modules using
-Cipher light, but it might be convenient to include it anyway as it's used in
-the implementation of `mbedtls_cipher_crypt()`.
-
 #### Cipher light dual dispatch
 
 This is likely to come in the future, but has not been defined yet.