key-exchange: Warn about costly operations in set_public_key()

diff --git a/src/libstrongswan/crypto/key_exchange.h b/src/libstrongswan/crypto/key_exchange.h
index b55ed558eda0e5140158794b21026b7ce3df6d39..70d6d49938a23ed842dfdad9f2cc9b778b9f56c8 100644 (file)
--- a/src/libstrongswan/crypto/key_exchange.h
+++ b/src/libstrongswan/crypto/key_exchange.h
@@ -105,6 +105,10 @@ struct key_exchange_t {
        /**
         * Sets the public key from the peer.
         *
+        * @note This operation should be relatively quick. Costly public key
+        * validation operations or key derivation should be implemented in
+        * get_shared_secret().
+        *
         * @param value         public key of peer
         * @return                      TRUE if other public key verified and set
         */