diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 3342b1b..9c28609 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -5672,7 +5672,7 @@
      * It isn't enough to require the caller to initialize operation to
      * PSA_MAC_OPERATION_INIT, since one field is a union and initializing
      * a union does not necessarily initialize all of its members.
-     * psa_mac_setup() would could handle PSA_MAC_OPERATION_INIT, but here we
+     * psa_mac_setup() would handle PSA_MAC_OPERATION_INIT, but here we
      * bypass it and call lower-level functions directly. */
     memset(operation, 0, sizeof(*operation));
 
diff --git a/library/psa_crypto_mac.c b/library/psa_crypto_mac.c
index 7f625c5..4464158 100644
--- a/library/psa_crypto_mac.c
+++ b/library/psa_crypto_mac.c
@@ -465,7 +465,7 @@
 {
     psa_status_t status = PSA_ERROR_CORRUPTION_DETECTED;
     mbedtls_psa_mac_operation_t operation = MBEDTLS_PSA_MAC_OPERATION_INIT;
-    /* Make sure the whole the operation is zeroed.
+    /* Make sure the whole operation is zeroed.
      * PSA_MAC_OPERATION_INIT does not necessarily do it fully,
      * since one field is a union and initializing a union does not
      * necessarily initialize all of its members.