diff --git a/cipher/hctr.go b/cipher/hctr.go
index 01c36ef..0954aa3 100644
--- a/cipher/hctr.go
+++ b/cipher/hctr.go
@@ -156,7 +156,7 @@ func (h *hctr) mul(y *hctrFieldElement) {
 
 			// the values in |table| are ordered for
 			// little-endian bit positions. See the comment
-			// in NewGCMWithNonceSize.
+			// in NewHCTR.
 			t := &h.productTable[word&0xf]
 
 			z.low ^= t.low