[CFRG] Re: RGLC on draft-irtf-cfrg-aegis-aead

[Frank Denis <[e-mail]>]

Hi Chris,

Thanks for reviewing the last version of the draft and for your feedback.

We’ve incorporated your suggestions, and you can view the changes made since version 13 here:
https://author-tools.ietf.org/api/iddiff?doc_1=draft-irtf-cfrg-aegis-aead&url_2=https://cfrg.github.io/draft-irtf-cfrg-aegis-aead/draft-irtf-cfrg-aegis-aead.txt

Do these changes address your concerns?

Kind regards,

-Frank. 

> On Dec 6, 2024, at 23:03, Chris Barber <[e-mail]> wrote:
> 
> I’ve reviewed version 13 of the document and have a few suggested editorial
> changes:
> 
> Section 3.2: "The decrypted message MUST be overwritten with zeros."
> Proposed change: "The decrypted message MUST be overwritten with zeros
> before being returned."
> 
> Accounts for implementations where the message and ciphertext don't overlap
> and the function either returns the message or throws an exception.
> Overwriting is unnecessary if the value is no longer accessible after the
> function returns.
> 
> Section 5.1: "The rate is 2 * 128 * D bits."
> Proposed change: "256 * D bits."
> 
> The expanded form is unnecessary and, in my opinion, less clear.
> 
> Section 5.4.2: "but absorbs R (2 * 128 * D) bits at once."
> Proposed change: "but absorbs R (= 256 * D) bits at once."
> 
> Clarifies that R is equal to 256 * D and not interpreted as R * 2 * 128 * D