diff --git a/library/bignum_mod.h b/library/bignum_mod.h
index ab00c93033..f2fd7e2457 100644
--- a/library/bignum_mod.h
+++ b/library/bignum_mod.h
@@ -7,9 +7,10 @@
  * explicitly indicated otherwise:
  *
  * - **Modulus parameters**: the modulus is passed as a pointer to a structure
- *   of type #mbedtls_mpi_mod_modulus. The structure must be setup with an
- *   array of limbs storing the bignum value of the modulus. Unless otherwise
- *   specified, the modulus is called \p N and is input-only.
+ *   of type #mbedtls_mpi_mod_modulus. The structure must be set up with an
+ *   array of limbs storing the bignum value of the modulus. The modulus must
+ *   be odd and is assumed to have no leading zeroes. The modulus is usually
+ *   named \p N and is usually input-only.
  * - **Bignum parameters**: Bignums are passed as pointers to an array of
  *   limbs or to a #mbedtls_mpi_mod_residue structure. A limb has the type
  *   #mbedtls_mpi_uint. Residues must be initialized before use, and must be
diff --git a/library/bignum_mod_raw.h b/library/bignum_mod_raw.h
index 56e5cbc2ea..7559ae8c63 100644
--- a/library/bignum_mod_raw.h
+++ b/library/bignum_mod_raw.h
@@ -15,9 +15,10 @@
  * The functions in this module obey the following conventions unless
  * explicitly indicated otherwise:
  * - **Modulus parameters**: the modulus is passed as a pointer to a structure
- *   of type #mbedtls_mpi_mod_modulus. The structure must be setup with an
- *   array of limbs storing the bignum value of the modulus. Unless otherwise
- *   specified, the modulus is called \p N and is input-only.
+ *   of type #mbedtls_mpi_mod_modulus. The structure must be set up with an
+ *   array of limbs storing the bignum value of the modulus. The modulus must
+ *   be odd and is assumed to have no leading zeroes. The modulus is usually
+ *   named \p N and is usually input-only.
  * - **Bignum parameters**: Bignums are passed as pointers to an array of
  *   limbs. A limb has the type #mbedtls_mpi_uint. Unless otherwise specified:
  *     - Bignum parameters called \p A, \p B, ... are inputs, and are not