diff --git a/include/mbedtls/check_config.h b/include/mbedtls/check_config.h
index 2ea0b47b3..10387061a 100644
--- a/include/mbedtls/check_config.h
+++ b/include/mbedtls/check_config.h
@@ -326,7 +326,7 @@
 #endif
 
 /* Use of EC J-PAKE in TLS requires SHA-256.
- * This will be taken from MD is present, or from PSA if MD is absent.
+ * This will be taken from MD if it is present, or from PSA if MD is absent.
  * Note: ECJPAKE_C depends on MD_C || PSA_CRYPTO_C. */
 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) &&                    \
     !( defined(MBEDTLS_MD_C) && defined(MBEDTLS_SHA256_C) ) &&          \
diff --git a/include/mbedtls/mbedtls_config.h b/include/mbedtls/mbedtls_config.h
index 473b74c03..f6ecdbf5b 100644
--- a/include/mbedtls/mbedtls_config.h
+++ b/include/mbedtls/mbedtls_config.h
@@ -958,7 +958,7 @@
  * might still happen. For this reason, this is disabled by default.
  *
  * Requires: MBEDTLS_ECJPAKE_C
- *           SHA-256 (via MD is present, or via PSA, see MBEDTLS_ECJPAKE_C)
+ *           SHA-256 (via MD if present, or via PSA, see MBEDTLS_ECJPAKE_C)
  *           MBEDTLS_ECP_DP_SECP256R1_ENABLED
  *
  * This enables the following ciphersuites (if other requisites are