diff --git a/contrib/envoy/extensions/private_key_providers/cryptomb/v3alpha/cryptomb.proto b/contrib/envoy/extensions/private_key_providers/cryptomb/v3alpha/cryptomb.proto
index 20290d88..cba32b76 100644
--- a/contrib/envoy/extensions/private_key_providers/cryptomb/v3alpha/cryptomb.proto
+++ b/contrib/envoy/extensions/private_key_providers/cryptomb/v3alpha/cryptomb.proto
@@ -21,10 +21,10 @@ option (udpa.annotations.file_status).package_version_status = ACTIVE;
 
 // A CryptoMbPrivateKeyMethodConfig message specifies how the CryptoMb private
 // key provider is configured. The private key provider provides ``SIMD``
-// processing for RSA sign and decrypt operations (ECDSA signing uses regular
-// BoringSSL functions). The provider works by gathering the operations into a
-// worker-thread specific queue, and processing the queue using ``ipp-crypto``
-// library when the queue is full or when a timer expires.
+// processing for ECDSA sign operations and RSA sign and decrypt operations.
+// The provider works by gathering the operations into a worker-thread specific
+// queue, and processing the queue using ``ipp-crypto`` library when the queue
+// is full or when a timer expires.
 // [#extension-category: envoy.tls.key_providers]
 message CryptoMbPrivateKeyMethodConfig {
   // Private key to use in the private key provider. If set to inline_bytes or