diff --git a/AesExtra/AesCmac.cs b/AesExtra/AesCmac.cs
index e67c3c6..63cadfe 100644
--- a/AesExtra/AesCmac.cs
+++ b/AesExtra/AesCmac.cs
@@ -13,6 +13,8 @@ namespace Dorssel.Security.Cryptography;
 /// <summary>
 /// Computes a Cipher-based Message Authentication Code (CMAC) by using the symmetric key AES block cipher.
 /// </summary>
+/// <seealso href="https://csrc.nist.gov/publications/detail/sp/800-38b/final"/>
+/// <seealso href="https://www.rfc-editor.org/rfc/rfc4493.html"/>
 public sealed class AesCmac
     : KeyedHashAlgorithm
 {
@@ -343,6 +345,7 @@ static async ValueTask UncheckedOneShotAsync(byte[] key, Stream source, Memory<b
         }
     }
 
+    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
     static void ThrowIfInvalidKey(ReadOnlySpan<byte> key)
     {
         if (key.Length is not (16 or 24 or 32))
@@ -351,6 +354,8 @@ static void ThrowIfInvalidKey(ReadOnlySpan<byte> key)
         }
     }
 
+    /// <exception cref="ArgumentNullException"><paramref name="key"/> is <see langword="null"/>.</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
     static void ThrowIfInvalidKey(byte[] key)
     {
         if (key is null)
@@ -360,6 +365,7 @@ static void ThrowIfInvalidKey(byte[] key)
         ThrowIfInvalidKey(key.AsSpan());
     }
 
+    /// <exception cref="ArgumentNullException"><paramref name="source"/> is <see langword="null"/>.</exception>
     static void ThrowIfInvalidSource(byte[] source)
     {
         if (source is null)
@@ -368,6 +374,8 @@ static void ThrowIfInvalidSource(byte[] source)
         }
     }
 
+    /// <exception cref="ArgumentNullException"><paramref name="source"/> is <see langword="null"/>.</exception>
+    /// <exception cref="ArgumentException"><paramref name="source"/> does not support reading.</exception>
     static void ThrowIfInvalidSource(Stream source)
     {
         if (source is null)
@@ -380,6 +388,10 @@ static void ThrowIfInvalidSource(Stream source)
         }
     }
 
+    /// <exception cref="ArgumentException">
+    /// The buffer in <paramref name="destination"/> is too small to hold the calculated CMAC.
+    /// The AES-CMAC algorithm always produces a 128-bit CMAC, or 16 bytes.
+    /// </exception>
     static void ThrowIfInvalidDestination(Span<byte> destination)
     {
         if (destination.Length < BLOCKSIZE)
@@ -395,11 +407,14 @@ static void ThrowIfInvalidDestination(Span<byte> destination)
     /// <param name="source">The data to CMAC.</param>
     /// <param name="destination">The buffer to receive the CMAC value.</param>
     /// <param name="bytesWritten">When this method returns, the total number of bytes written into <paramref name="destination"/>.</param>
-    /// <returns><see langword="false"/> if <paramref name="destination"/> is too small to hold the calculated CMAC, <see langword="true"/> otherwise.</returns>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <returns>
+    /// <see langword="true"/> if <paramref name="destination"/> was large enough to receive the calculated CMAC; otherwise, <see langword="false"/>.
+    /// </returns>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
     public static bool TryHashData(ReadOnlySpan<byte> key, ReadOnlySpan<byte> source, Span<byte> destination, out int bytesWritten)
     {
         ThrowIfInvalidKey(key);
+
         if (destination.Length < BLOCKSIZE)
         {
             bytesWritten = 0;
@@ -418,8 +433,8 @@ public static bool TryHashData(ReadOnlySpan<byte> key, ReadOnlySpan<byte> source
     /// <param name="key">The CMAC key.</param>
     /// <param name="source">The data to CMAC.</param>
     /// <returns>The CMAC of the data.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="key"/> or <paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(byte[])"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(byte[])"/>
     public static byte[] HashData(byte[] key, byte[] source)
     {
         ThrowIfInvalidKey(key);
@@ -436,7 +451,7 @@ public static byte[] HashData(byte[] key, byte[] source)
     /// <param name="key">The CMAC key.</param>
     /// <param name="source">The data to CMAC.</param>
     /// <returns>The CMAC of the data.</returns>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
     public static byte[] HashData(ReadOnlySpan<byte> key, ReadOnlySpan<byte> source)
     {
         ThrowIfInvalidKey(key);
@@ -454,11 +469,8 @@ public static byte[] HashData(ReadOnlySpan<byte> key, ReadOnlySpan<byte> source)
     /// <param name="source">The data to CMAC.</param>
     /// <param name="destination">The buffer to receive the CMAC value.</param>
     /// <returns>The total number of bytes written to <paramref name="destination"/>.</returns>
-    /// <exception cref="ArgumentException">
-    /// The buffer in <paramref name="destination"/> is too small to hold the calculated CMAC.
-    /// The AES-CMAC algorithm always produces a 256-bit CMAC, or 32 bytes.
-    /// </exception>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
+    /// <inheritdoc cref="ThrowIfInvalidDestination(Span{byte})"/>
     public static int HashData(ReadOnlySpan<byte> key, ReadOnlySpan<byte> source, Span<byte> destination)
     {
         ThrowIfInvalidKey(key);
@@ -475,9 +487,8 @@ public static int HashData(ReadOnlySpan<byte> key, ReadOnlySpan<byte> source, Sp
     /// <param name="key">The CMAC key.</param>
     /// <param name="source">The stream to CMAC.</param>
     /// <returns>The CMAC of the data.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="key"/> or <paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="ArgumentException"><paramref name="source"/> does not support reading.</exception>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(byte[])"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(Stream)"/>
     public static byte[] HashData(byte[] key, Stream source)
     {
         ThrowIfInvalidKey(key);
@@ -494,9 +505,8 @@ public static byte[] HashData(byte[] key, Stream source)
     /// <param name="key">The CMAC key.</param>
     /// <param name="source">The stream to CMAC.</param>
     /// <returns>The CMAC of the data.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="ArgumentException"><paramref name="source"/> does not support reading.</exception>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(Stream)"/>
     public static byte[] HashData(ReadOnlySpan<byte> key, Stream source)
     {
         ThrowIfInvalidKey(key);
@@ -515,16 +525,9 @@ public static byte[] HashData(ReadOnlySpan<byte> key, Stream source)
     /// <param name="source">The stream to CMAC.</param>
     /// <param name="destination">The buffer to receive the CMAC value.</param>
     /// <returns>The total number of bytes written to <paramref name="destination"/>.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="ArgumentException">
-    /// The buffer in <paramref name="destination"/> is too small to hold the calculated CMAC.
-    /// The AES-CMAC algorithm always produces a 256-bit CMAC, or 32 bytes.
-    ///
-    /// -or-
-    ///
-    /// <paramref name="source"/> does not support reading.
-    /// </exception>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(Stream)"/>
+    /// <inheritdoc cref="ThrowIfInvalidDestination(Span{byte})"/>
     public static int HashData(ReadOnlySpan<byte> key, Stream source, Span<byte> destination)
     {
         ThrowIfInvalidKey(key);
@@ -543,8 +546,8 @@ public static int HashData(ReadOnlySpan<byte> key, Stream source, Span<byte> des
     /// <param name="source">The stream to CMAC.</param>
     /// <param name="cancellationToken">The token to monitor for cancellation requests. The default value is <see cref="CancellationToken.None"/>.</param>
     /// <returns>The HMAC of the data.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="key"/> or <paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="ArgumentException"><paramref name="source"/> does not support reading.</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(byte[])"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(Stream)"/>
     /// <exception cref="OperationCanceledException">The cancellation token was canceled. This exception is stored into the returned task.</exception>
     /// <remarks>
     /// This method stores in the task it returns all non-usage exceptions that the method's synchronous counterpart can throw.
@@ -552,7 +555,6 @@ public static int HashData(ReadOnlySpan<byte> key, Stream source, Span<byte> des
     /// Usage exceptions, such as <see cref="ArgumentException"/>, are still thrown synchronously.
     /// For the stored exceptions, see the exceptions thrown by <see cref="HashData(byte[], Stream)"/>.
     /// </remarks>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
     public static async ValueTask<byte[]> HashDataAsync(byte[] key, Stream source, CancellationToken cancellationToken = default)
     {
         ThrowIfInvalidKey(key);
@@ -570,8 +572,8 @@ public static async ValueTask<byte[]> HashDataAsync(byte[] key, Stream source, C
     /// <param name="source">The stream to CMAC.</param>
     /// <param name="cancellationToken">The token to monitor for cancellation requests. The default value is <see cref="CancellationToken.None"/>.</param>
     /// <returns>The HMAC of the data.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="ArgumentException"><paramref name="source"/> does not support reading.</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(Stream)"/>
     /// <exception cref="OperationCanceledException">The cancellation token was canceled. This exception is stored into the returned task.</exception>
     /// <remarks>
     /// This method stores in the task it returns all non-usage exceptions that the method's synchronous counterpart can throw.
@@ -579,7 +581,6 @@ public static async ValueTask<byte[]> HashDataAsync(byte[] key, Stream source, C
     /// Usage exceptions, such as <see cref="ArgumentException"/>, are still thrown synchronously.
     /// For the stored exceptions, see the exceptions thrown by <see cref="HashData(ReadOnlySpan{byte}, Stream)"/>.
     /// </remarks>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
     public static async ValueTask<byte[]> HashDataAsync(ReadOnlyMemory<byte> key, Stream source, CancellationToken cancellationToken = default)
     {
         ThrowIfInvalidKey(key.Span);
@@ -599,8 +600,9 @@ public static async ValueTask<byte[]> HashDataAsync(ReadOnlyMemory<byte> key, St
     /// <param name="destination">The buffer to receive the CMAC value.</param>
     /// <param name="cancellationToken">The token to monitor for cancellation requests. The default value is <see cref="CancellationToken.None"/>.</param>
     /// <returns>The total number of bytes written to <paramref name="destination"/>.</returns>
-    /// <exception cref="ArgumentNullException"><paramref name="source"/> is <see langword="null"/>.</exception>
-    /// <exception cref="ArgumentException"><paramref name="source"/> does not support reading.</exception>
+    /// <inheritdoc cref="ThrowIfInvalidKey(ReadOnlySpan{byte})"/>
+    /// <inheritdoc cref="ThrowIfInvalidSource(Stream)"/>
+    /// <inheritdoc cref="ThrowIfInvalidDestination(Span{byte})"/>
     /// <exception cref="OperationCanceledException">The cancellation token was canceled. This exception is stored into the returned task.</exception>
     /// <remarks>
     /// This method stores in the task it returns all non-usage exceptions that the method's synchronous counterpart can throw.
@@ -608,7 +610,6 @@ public static async ValueTask<byte[]> HashDataAsync(ReadOnlyMemory<byte> key, St
     /// Usage exceptions, such as <see cref="ArgumentException"/>, are still thrown synchronously.
     /// For the stored exceptions, see the exceptions thrown by <see cref="HashData(ReadOnlySpan{byte}, ReadOnlySpan{byte}, Span{byte})"/>.
     /// </remarks>
-    /// <exception cref="CryptographicException">The <paramref name="key"/> length is other than 16, 24, or 32 bytes (128, 192, or 256 bits).</exception>
     public static async ValueTask<int> HashDataAsync(ReadOnlyMemory<byte> key, Stream source, Memory<byte> destination,
         CancellationToken cancellationToken = default)
     {
diff --git a/AesExtra/AesCtr.cs b/AesExtra/AesCtr.cs
index f279279..cb96209 100644
--- a/AesExtra/AesCtr.cs
+++ b/AesExtra/AesCtr.cs
@@ -11,6 +11,7 @@ namespace Dorssel.Security.Cryptography;
 /// <summary>
 /// Provides an implementation of the Advanced Encryption Standard (AES) symmetric algorithm in CTR mode.
 /// </summary>
+/// <seealso href="https://csrc.nist.gov/publications/detail/sp/800-38a/final"/>
 public sealed class AesCtr
     : Aes
 {
@@ -139,26 +140,60 @@ public override void GenerateKey()
     }
 
     #region Modern_SymmetricAlgorithm
-    /// <summary>
-    /// TODO
-    /// </summary>
-    /// <param name="input">TODO</param>
-    /// <param name="iv">TODO</param>
-    /// <returns>TODO</returns>
-    public byte[] TransformCtr(byte[] input, byte[] iv)
+    /// <exception cref="ArgumentNullException"><paramref name="input"/> is <see langword="null"/>.</exception>
+    static void ThrowIfInvalidInput(byte[] input)
     {
         if (input is null)
         {
             throw new ArgumentNullException(nameof(input));
         }
+    }
+
+    /// <exception cref="ArgumentNullException"><paramref name="iv"/> is <see langword="null"/>.</exception>
+    /// <inheritdoc cref="ThrowIfInvalidIV(ReadOnlySpan{byte})"/>
+    static void ThrowIfInvalidIV(byte[] iv)
+    {
         if (iv is null)
         {
-            throw new ArgumentNullException(nameof(input));
+            throw new ArgumentNullException(nameof(iv));
         }
+        ThrowIfInvalidIV(iv.AsSpan());
+    }
+
+    /// <exception cref="ArgumentException">
+    /// <paramref name="iv"/> is the incorrect length.
+    /// Callers are expected to pass an initialization vector that is exactly <see cref="SymmetricAlgorithm.BlockSize"/> in length,
+    /// converted to bytes (`BlockSize / 8`).
+    /// </exception>
+    static void ThrowIfInvalidIV(ReadOnlySpan<byte> iv)
+    {
         if (iv.Length != BLOCKSIZE)
         {
             throw new ArgumentException("Specified initial counter (IV) does not match the block size for this algorithm.", nameof(iv));
         }
+    }
+
+    /// <exception cref="ArgumentException">The buffer in <paramref name="destination"/> is too small to hold the transformed data.</exception>
+    static void ThrowIfInvalidDestination(Span<byte> destination, int requiredLength)
+    {
+        if (destination.Length < requiredLength)
+        {
+            throw new ArgumentException("Destination is too short.", nameof(destination));
+        }
+    }
+
+    /// <summary>
+    /// Transforms data using CTR mode.
+    /// </summary>
+    /// <param name="input">The data to transform.</param>
+    /// <param name="iv">The initialization vector (initial counter).</param>
+    /// <returns>The transformed data.</returns>
+    /// <inheritdoc cref="ThrowIfInvalidInput(byte[])"/>
+    /// <inheritdoc cref="ThrowIfInvalidIV(byte[])"/>
+    public byte[] TransformCtr(byte[] input, byte[] iv)
+    {
+        ThrowIfInvalidInput(input);
+        ThrowIfInvalidIV(iv);
 
         var output = new byte[input.Length];
         using var transform = new AesCtrTransform(Key, iv);
@@ -167,17 +202,15 @@ public byte[] TransformCtr(byte[] input, byte[] iv)
     }
 
     /// <summary>
-    /// TODO
+    /// Transforms data using CTR mode.
     /// </summary>
-    /// <param name="input">TODO</param>
-    /// <param name="iv">TODO</param>
-    /// <returns>TODO</returns>
+    /// <param name="input">The data to transform.</param>
+    /// <param name="iv">The initialization vector (initial counter).</param>
+    /// <returns>The transformed data.</returns>
+    /// <inheritdoc cref="ThrowIfInvalidIV(ReadOnlySpan{byte})"/>
     public byte[] TransformCtr(ReadOnlySpan<byte> input, ReadOnlySpan<byte> iv)
     {
-        if (iv.Length != BLOCKSIZE)
-        {
-            throw new ArgumentException("Specified initial counter (IV) does not match the block size for this algorithm.", nameof(iv));
-        }
+        ThrowIfInvalidIV(iv);
 
         var output = new byte[input.Length];
         using var transform = new AesCtrTransform(Key, iv);
@@ -186,22 +219,18 @@ public byte[] TransformCtr(ReadOnlySpan<byte> input, ReadOnlySpan<byte> iv)
     }
 
     /// <summary>
-    /// TODO
+    /// Transforms data into the specified buffer, using CTR mode.
     /// </summary>
-    /// <param name="input">TODO</param>
-    /// <param name="iv">TODO</param>
-    /// <param name="destination">TODO</param>
-    /// <returns>TODO</returns>
+    /// <param name="input">The data to transform.</param>
+    /// <param name="iv">The initialization vector (initial counter).</param>
+    /// <param name="destination">The buffer to receive the transformed data.</param>
+    /// <returns>The total number of bytes written to <paramref name="destination"/>.</returns>
+    /// <inheritdoc cref="ThrowIfInvalidIV(ReadOnlySpan{byte})"/>
+    /// <inheritdoc cref="ThrowIfInvalidDestination(Span{byte}, int)"/>
     public int TransformCtr(ReadOnlySpan<byte> input, ReadOnlySpan<byte> iv, Span<byte> destination)
     {
-        if (iv.Length != BLOCKSIZE)
-        {
-            throw new ArgumentException("Specified initial counter (IV) does not match the block size for this algorithm.", nameof(iv));
-        }
-        if (destination.Length < input.Length)
-        {
-            throw new ArgumentException("Destination is too short.", nameof(destination));
-        }
+        ThrowIfInvalidIV(iv);
+        ThrowIfInvalidDestination(destination, input.Length);
 
         using var transform = new AesCtrTransform(Key, iv);
         transform.UncheckedTransform(input, destination);
@@ -209,19 +238,19 @@ public int TransformCtr(ReadOnlySpan<byte> input, ReadOnlySpan<byte> iv, Span<by
     }
 
     /// <summary>
-    /// TODO
+    /// Attempts to transform data into the specified buffer, using CTR mode.
     /// </summary>
-    /// <param name="input">TODO</param>
-    /// <param name="iv">TODO</param>
-    /// <param name="destination">TODO</param>
-    /// <param name="bytesWritten">TODO</param>
-    /// <returns>TODO</returns>
+    /// <param name="input">The data to transform.</param>
+    /// <param name="iv">The initialization vector (initial counter).</param>
+    /// <param name="destination">The buffer to receive the transformed data.</param>
+    /// <param name="bytesWritten">When this method returns, contains the total number of bytes written to <paramref name="destination"/>.</param>
+    /// <returns>
+    /// <see langword="true"/> if <paramref name="destination"/> was large enough to receive the transformed data; otherwise, <see langword="false"/>.
+    /// </returns>
+    /// <inheritdoc cref="ThrowIfInvalidIV(ReadOnlySpan{byte})"/>
     public bool TryTransformCtr(ReadOnlySpan<byte> input, ReadOnlySpan<byte> iv, Span<byte> destination, out int bytesWritten)
     {
-        if (iv.Length != BLOCKSIZE)
-        {
-            throw new ArgumentException("Specified initial counter (IV) does not match the block size for this algorithm.", nameof(iv));
-        }
+        ThrowIfInvalidIV(iv);
 
         if (destination.Length < input.Length)
         {
diff --git a/AesExtra/AesExtra.csproj b/AesExtra/AesExtra.csproj
index 749184c..374e068 100644
--- a/AesExtra/AesExtra.csproj
+++ b/AesExtra/AesExtra.csproj
@@ -7,11 +7,12 @@ SPDX-License-Identifier: MIT
 <Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFrameworks>netstandard2.0;net8.0</TargetFrameworks>
+    <TargetFrameworks Condition=" '$(DocFx)' != 'true' ">netstandard2.0;net8.0</TargetFrameworks>
     <RootNamespace>Dorssel.Security.Cryptography</RootNamespace>
     <AssemblyName>Dorssel.Security.Cryptography.AesExtra</AssemblyName>
 
     <!-- Fixup for docfx -->
+    <TargetFramework Condition=" '$(DocFx)' == 'true' ">net8.0</TargetFramework>
     <LangVersion Condition=" '$(DocFx)' == 'true' ">preview</LangVersion>
 
     <IsPackable>true</IsPackable>