diff --git a/src/secp256k1/src/modules/schnorr/schnorr_impl.h b/src/secp256k1/src/modules/schnorr/schnorr_impl.h
--- a/src/secp256k1/src/modules/schnorr/schnorr_impl.h
+++ b/src/secp256k1/src/modules/schnorr/schnorr_impl.h
@@ -28,7 +28,7 @@
  *
  *   Compute point R = k * G. Negate nonce if R.y is not a quadratic residue.
  *   Compute scalar e = Hash(R.x || compressed(P) || m) mod n.
- *   Compute scalar s = k + e * x.
+ *   Compute scalar s = (k + e * x) mod n.
  *   The signature is (R.x, s).
  *
  * Verification:
@@ -37,7 +37,7 @@
  *     public key point P,
  *     signature: (32-byte r, scalar s)
  *
- *   Signature is invalid if s >= order or r >= p.
+ *   Signature is invalid if s >= n or r >= p.
  *   Compute scalar e = Hash(r || compressed(P) || m) mod n.
  *   Option 1 (faster for single verification):
  *     Compute point R = s * G - e * P.