diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index fa88ebf01..0bc08cca4 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -1884,6 +1884,10 @@
  *
  * Enable the CTR_DRBG AES-256-based random generator.
  *
+ * \note This module only achieves a 256-bit security strength if
+ *       the generator is seeded with sufficient entropy.
+ *       See ctr_drbg.h for more details.
+ *
  * Module:  library/ctr_drbg.c
  * Caller:
  *