diff --git a/crypto/bn/bn_mont.c b/crypto/bn/bn_mont.c
index d3782416d36c292ac787ddef8914de4a866113e1..5ef08d9157247ba70a2f024f6c56b52f6b16426f 100644
--- a/crypto/bn/bn_mont.c
+++ b/crypto/bn/bn_mont.c
@@ -57,9 +57,10 @@
  */
 
 /*
- * Details about Montgomery multiplication algorithms can be found at:
- * http://security.ece.orst.edu/publications.html, especially
- * http://security.ece.orst.edu/koc/papers/j37acmon.pdf
+ * Details about Montgomery multiplication algorithms can be found at
+ * http://security.ece.orst.edu/publications.html, e.g.
+ * http://security.ece.orst.edu/koc/papers/j37acmon.pdf and
+ * sections 3.8 and 4.2 in http://security.ece.orst.edu/koc/papers/r01rsasw.pdf
  */
 
 #include <stdio.h>