diff --git a/TODO b/TODO
index 279c0cf..65e19ee 100644
--- a/TODO
+++ b/TODO
@@ -189,6 +189,22 @@ ATT/GATT (new shared stack)
   Priority: Medium
   Complexity: C1
 
+- The recently added support for ATT signed writes requires the following kernel
+  modules to be enabled:
+
+     CONFIG_CRYPTO_USER_API
+     CONFIG_CRYPTO_USER_API_HASH
+     CONFIG_CRYPTO_USER_API_SKCIPHER
+
+  Currently, if these are not enabled, bt_att_new silently returns NULL. We
+  should handle this more gracefully by not supporting signed writes if we can't
+  initialize bt_crypto while succeeding bt_att initialization regardless.
+
+  This behavior should be documented in the README.
+
+  Priority: High
+  Complexity: C1
+
 
 ATT/GATT (old/outdated)
 =======================