diff --git a/include/psa/crypto.h b/include/psa/crypto.h
index 18c783c..e54af34 100644
--- a/include/psa/crypto.h
+++ b/include/psa/crypto.h
@@ -3782,7 +3782,8 @@
  *                          this function is equivalent to
  *                          psa_key_derivation_output_key().
  *                          Mbed TLS currently only supports the default
- *                          method, i.e. #PSA_KEY_PRODUCTION_PARAMETERS_INIT,
+ *                          production parameters, i.e.
+ *                          #PSA_KEY_PRODUCTION_PARAMETERS_INIT,
  *                          for all key types.
  * \param params_data_length
  *                          Length of `params->data` in bytes.
diff --git a/include/psa/crypto_types.h b/include/psa/crypto_types.h
index c509807..31ea686 100644
--- a/include/psa/crypto_types.h
+++ b/include/psa/crypto_types.h
@@ -455,11 +455,11 @@
  */
 typedef uint16_t psa_key_derivation_step_t;
 
-/** \brief Custom method for key generation or key derivation.
+/** \brief Custom parameters for key generation or key derivation.
  *
  * This is a structure type with at least the following fields:
  *
- * - \c flags: an unsigned integer type. 0 for the default method.
+ * - \c flags: an unsigned integer type. 0 for the default production parameters.
  * - \c data: a flexible array of bytes.
  *
  * The interpretation of this structure depend on the type of the
@@ -472,8 +472,8 @@
  *       Implementations must support 65535, should support 3 and may
  *       support other values.
  *       When not using a driver, Mbed TLS supports values up to \c INT_MAX.
- *       If this is empty or if the custom method is omitted altogether,
- *       the default value 65537 is used.
+ *       If this is empty or if the custom production parameters are omitted
+ *       altogether, the default value 65537 is used.
  * - Other key types: reserved for future use. \c flags must be 0.
  *
  */