diff --git a/include/mbedtls/aes.h b/include/mbedtls/aes.h
index 27be761..22eb116 100644
--- a/include/mbedtls/aes.h
+++ b/include/mbedtls/aes.h
@@ -314,7 +314,7 @@
  *             2. Use a randomly-generated \p nonce_counter for each call.
  *             With this strategy, you need to ensure the nonce is generated
  *             in an unbiased way and you must not encrypt more than 2**64
- *             block of data.
+ *             blocks of data.
  *
  *             Note that for both stategies, the limit is in number of blocks
  *             and that an AES block is 16 bytes.
diff --git a/include/mbedtls/aria.h b/include/mbedtls/aria.h
index 2eed2f9..0c4960b 100644
--- a/include/mbedtls/aria.h
+++ b/include/mbedtls/aria.h
@@ -262,7 +262,7 @@
  *             2. Use a randomly-generated \p nonce_counter for each call.
  *             With this strategy, you need to ensure the nonce is generated
  *             in an unbiased way and you must not encrypt more than 2**64
- *             block of data.
+ *             blocks of data.
  *
  *             Note that for both stategies, the limit is in number of blocks
  *             and that an ARIA block is 16 bytes.
diff --git a/include/mbedtls/blowfish.h b/include/mbedtls/blowfish.h
index 4b4916e..f4e8afc 100644
--- a/include/mbedtls/blowfish.h
+++ b/include/mbedtls/blowfish.h
@@ -184,7 +184,7 @@
  *             2. Use a randomly-generated \p nonce_counter for each call.
  *             With this strategy, you need to ensure the nonce is generated
  *             in an unbiased way and you must not encrypt more than 2**32
- *             block of data.
+ *             blocks of data.
  *
  *             Note that for both stategies, the limit is in number of blocks
  *             and that a Blowfish block is 8 bytes.
diff --git a/include/mbedtls/camellia.h b/include/mbedtls/camellia.h
index 1b138fc..74e0961 100644
--- a/include/mbedtls/camellia.h
+++ b/include/mbedtls/camellia.h
@@ -201,7 +201,7 @@
  *             2. Use a randomly-generated \p nonce_counter for each call.
  *             With this strategy, you need to ensure the nonce is generated
  *             in an unbiased way and you must not encrypt more than 2**64
- *             block of data.
+ *             blocks of data.
  *
  *             Note that for both stategies, the limit is in number of blocks
  *             and that a CAMELLIA block is 16 bytes.