diff --git a/src/SAML2/Entity/ServiceProvider.php b/src/SAML2/Entity/ServiceProvider.php
index 838214ed2..d3deb4fd8 100644
--- a/src/SAML2/Entity/ServiceProvider.php
+++ b/src/SAML2/Entity/ServiceProvider.php
@@ -337,7 +337,6 @@ protected function decryptAndVerifyAssertions(array $unverifiedAssertions): arra
      */
     protected function decryptElement(EncryptedElementInterface $element): EncryptableElementInterface
     {
-        // TODO: When CBC-mode encryption is used, the assertion OR the Response must be signed
         $factory = $this->encryptionAlgorithmFactory;
 
         // If the IDP has a pre-shared key, try decrypting with that