- Added explanation for first bit/byte to zero in rsa_public

diff --git a/include/polarssl/rsa.h b/include/polarssl/rsa.h
index 7e6d19f..f9d02bd 100644
--- a/include/polarssl/rsa.h
+++ b/include/polarssl/rsa.h
@@ -210,7 +210,8 @@
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  *
  * \note           This function does NOT take care of message
- *                 padding. Also, be sure to set input[0] = 0.
+ *                 padding. Also, be sure to set input[0] = 0 or assure that
+ *                 input is smaller than N.
  *
  * \note           The input and output buffers must be large
  *                 enough (eg. 128 bytes if RSA-1024 is used).