[CFRG] Re: I-D Action: draft-irtf-cfrg-rsa-guidance-02.txt

[Alicja Kario <[e-mail]>]

I've updated the draft with few changes, mostly just to finish of what
I proposed previously:
 1. declared key generation outside the scope of the document
 2. added a new test vector: "invalid with a null padded ciphertext"
 3. added test vectors to all the previously proposed key sizes: 2049,
    3072, and 4096 bit
 4. fixed one typo

With that, I'd like to ask for Last Call.

On Thursday, 16 January 2025 14:29:41 CET, [e-mail] wrote:
> Internet-Draft draft-irtf-cfrg-rsa-guidance-02.txt is now available. It is a
> work item of the Crypto Forum (CFRG) RG of the IRTF.
>
>    Title:   Implementation Guidance for the PKCS #1 RSA 
> Cryptography Specification
>    Author:  Alicja Kario
>    Name:    draft-irtf-cfrg-rsa-guidance-02.txt
>    Pages:   46
>    Dates:   2025-01-16
>
> Abstract:
>
>    This document specifies additions and amendments to RFC 8017.
>    Specifically, it provides guidance to implementers of the standard to
>    protect against side-channel attacks.  It also deprecates the RSAES-
>    PKCS-v1_5 encryption scheme, but provides an alternative depadding
>    algorithm that protects against side-channel attacks raising from
>    users of vulnerable APIs.  The purpose of this specification is to
>    increase security of RSA implementations.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-irtf-cfrg-rsa-guidance/
>
> There is also an HTMLized version available at:
> https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-rsa-guidance-02
>
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-irtf-cfrg-rsa-guidance-02
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>

-- 
Regards,
Alicja (nee Hubert) Kario
Principal Quality Engineer, RHEL Crypto team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 115, 612 00, Brno, Czech Republic