diff --git a/src/libstrongswan/crypto/key_exchange.h b/src/libstrongswan/crypto/key_exchange.h
index b55ed558e..70d6d4993 100644
--- a/src/libstrongswan/crypto/key_exchange.h
+++ b/src/libstrongswan/crypto/key_exchange.h
@@ -105,6 +105,10 @@ struct key_exchange_t {
 	/**
 	 * Sets the public key from the peer.
 	 *
+	 * @note This operation should be relatively quick. Costly public key
+	 * validation operations or key derivation should be implemented in
+	 * get_shared_secret().
+	 *
 	 * @param value		public key of peer
 	 * @return			TRUE if other public key verified and set
 	 */