diff --git a/include/mbedtls/cmac.h b/include/mbedtls/cmac.h
index b94b6ed..5a59f90 100644
--- a/include/mbedtls/cmac.h
+++ b/include/mbedtls/cmac.h
@@ -84,8 +84,8 @@
  * \param in_len    length of the input data in bytes
  * \param tag       buffer for holding the generated tag
  * \param tag_len   length of the tag to generate in bytes
- *                  Must be 4, 6, 8 if cipher block size is 64
- *                  Must be 4, 6, 8 , 10, 12, 14 or 16 if cipher block size is 128
+ *                  Must be 2, 4, 6, 8 if cipher block size is 64
+ *                  Must be 2, 4, 6, 8, 10, 12, 14 or 16 if cipher block size is 128
  *
  * \return          0 if successful
  */
@@ -101,8 +101,8 @@
  * \param in_len    length of the input data in bytes
  * \param tag       buffer holding the tag to verify
  * \param tag_len   length of the tag to verify in bytes
- *                  Must be 4, 6, 8 if cipher block size is 64
- *                  Must be 4, 6, 8 , 10, 12, 14 or 16 if cipher block size is 128
+ *                  Must be 2, 4, 6, 8 if cipher block size is 64
+ *                  Must be 2, 4, 6, 8, 10, 12, 14 or 16 if cipher block size is 128
  * \return          0 if successful and authenticated
  *                  MBEDTLS_ERR_CMAC_VERIFY_FAILED if tag does not match
  */