diff --git a/keylime-agent.conf b/keylime-agent.conf
index 449bbb48..1e6e8b39 100644
--- a/keylime-agent.conf
+++ b/keylime-agent.conf
@@ -207,7 +207,7 @@ allow_payload_revocation_actions = true
 #
 # Currently accepted values include:
 # - hashing:    sha512, sha384, sha256 or sha1
-# - encryption: ecc or rsa
+# - encryption: rsa (alias for rsa2048), rsa1024, rsa2048, rsa3072, rsa4096, ecc (alias for ecc256), ecc192, ecc224, ecc256, ecc384, ecc521 or ecc_sm2. 
 # - signing:    rsassa, rsapss, ecdsa, ecdaa or ecschnorr
 #
 # To override tpm_hash_alg, set KEYLIME_AGENT_TPM_HASH_ALG environment variable.