[CFRG] [Technical Errata Reported] RFC9180 (7937)

RFC Errata System <rfc-editor@rfc-editor.org> Mon, 13 May 2024 20:18 UTC

To: rlb@ipv.sx, karthikeyan.bhargavan@inria.fr, ietf@benjaminlipp.de, caw@heapingbits.net, irsg@irtf.org, cfrg@irtf.org
From: RFC Errata System <rfc-editor@rfc-editor.org>
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240513201850.BB1FA4DF2C9@rfcpa.amsl.com>
Date: Mon, 13 May 2024 13:18:50 -0700
Message-ID-Hash: NN6JMXB7NH4ABS35GYPF64D47I2VJSDR
CC: raul@guardedbox.es, rfc-editor@rfc-editor.org
Precedence: list
Subject: [CFRG] [Technical Errata Reported] RFC9180 (7937)
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/4e4AA0tUJ5BhP82S7HT3qmOdSHk>

The following errata report has been submitted for RFC9180,
"Hybrid Public Key Encryption".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7937

--------------------------------------
Type: Technical
Reported by: Raul Siles <raul@guardedbox.es>

Section: 7.1.3

Original Text
-------------
- Section 7.1.3:

For X25519 and X448, the DeriveKeyPair() function applies 
a KDF to the input:

<function()>


Corrected Text
--------------
For X25519 and X448, the DeriveKeyPair() function applies 
a KDF to the input:

<function()>

The suite_id used implicitly in LabeledExtract() and LabeledExpand()
for DeriveKeyPair(ikm) is derived from the KEM identifier of the 
DHKEM in use (see section 7.1), that is, based on the type of key 
pair been generated for that DHKEM type.

Notes
-----
RFC 9180 dos not specify all the internal values for LabeledExtract(…) and LabeledExpand(…) for DeriveKeyPair(ikm), specifically the suite_id value. These values are required to standardise the DeriveKeyPair(ikm) function, as it is reference in other IETF drafts, such as https://www.ietf.org/archive/id/draft-westerbaan-cfrg-hpke-xyber768d00-02.html#name-derivekeypair-2, and because it is also used in the RFC 9180 KATs: see Appendix A.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it 
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9180 (draft-irtf-cfrg-hpke-12)
--------------------------------------
Title               : Hybrid Public Key Encryption
Publication Date    : February 2022
Author(s)           : R. Barnes, K. Bhargavan, B. Lipp, C. Wood
Category            : INFORMATIONAL
Source              : Crypto Forum Research Group
Stream              : IRTF
Verifying Party     : IRSG

[CFRG] [Technical Errata Reported] RFC9180 (7937) RFC Errata System