-# This external input must be validated carefully to avoid security issue like\r
-# buffer overflow, integer overflow.\r
+# This external input must be validated carefully to avoid security issues such as \r
+# buffer overflow or integer overflow.\r
+# The whole SMM authentication variable design relies on the integrity of flash part and SMM.\r
+# which is assumed to be protected by platform. All variable code and metadata in flash/SMM Memory\r
+# may not be modified without authorization. If platform fails to protect these resources, \r
+# the authentication service provided in this driver will be broken, and the behavior is undefined.\r