X-Git-Url: https://git.distorted.org.uk/~mdw/secnet/blobdiff_plain/1047c205103e6da9fc6a317f41583147dbc11aa3..a1a6042e24c9873aa6abf668bcb68d39d0eb4190:/x448.h

diff --git a/x448.h b/x448.h
index 401f4e2..d16b64a 100644
--- a/x448.h
+++ b/x448.h
@@ -55,7 +55,8 @@
  *
  * This is X448, as described in RFC7748, based on the elliptic curve defined
  * in Mike Hamburg, `Ed448-Goldilocks, a new elliptic curve', EUROCRYPT 2016,
- * https://eprint.iacr.org/2015/625/.
+ * https://eprint.iacr.org/2015/625/.  (The curve here is 4-isogenous to
+ * Hamburg's curve.)
  *
  * The RFC-specified operation is simpler than the Diffie--Hellman function
  * described in Hamburg's paper, since it doesn't involve the `Decaf'