X-Git-Url: https://git.distorted.org.uk/~mdw/catacomb/blobdiff_plain/643eb1bbf91769f4f929173dd8452a94c36f1685..a90d420cbe87490c844ae422c966e746d3134b07:/pub/x448.h

diff --git a/pub/x448.h b/pub/x448.h
index f1b0f2cc..4561d41a 100644
--- a/pub/x448.h
+++ b/pub/x448.h
@@ -36,7 +36,8 @@
  *
  * This is X448, as described in RFC7748, based on the elliptic curve defined
  * in Mike Hamburg, `Ed448-Goldilocks, a new elliptic curve', EUROCRYPT 2016,
- * https://eprint.iacr.org/2015/625/.
+ * https://eprint.iacr.org/2015/625/.  (The curve here is 4-isogenous to
+ * Hamburg's curve.)
  *
  * The RFC-specified operation is simpler than the Diffie--Hellman function
  * described in Hamburg's paper, since it doesn't involve the `Decaf'