[CFRG] [Technical Errata Reported] RFC9474 (9089)
rfc-editor@rfc-editor.org Mon, 10 August 2026 16:20 UTC
Return-Path: <rfc-editor@rfc-editor.org>
X-Original-To: cfrg@ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from errata-celery-848864fbc6-v9j4g (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 83DC31273F94C; Mon, 10 Aug 2026 09:20:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786378812; bh=HlZ6fMoEgi7L/IM/ZGrPzoWsM71hNUz4bNcXAYBcG/8=; h=Subject:From:To:Cc:Date; b=tNoZ9m6jEU+JBjQM4DmgrHGfQpU/DROK3TzpI45QrtMZIfoJ60BkeTjvj77PMXv4a gydrdhCblWjzt2olkRWIcdEEfxb1WS4qjPbdwtVc4fOYsj8ctL9J0+7iDCOM8cm6hP xriffmJX8LqmQsD4kwP9rzyysk1bRAygPpWjfRaU=
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: rfc-editor@rfc-editor.org
To: fd@00f.net, caw@heapingbits.net, irsg@irtf.org, ietf@fredericjacobs.com
Date: Mon, 10 Aug 2026 16:20:12 -0000
message-id: <178637881238.19.6828789121325858201@rfc-editor.org>
Message-ID-Hash: KIZLYKNNO6GXXUNKIZ3LM4WR25MIRLJP
X-Message-ID-Hash: KIZLYKNNO6GXXUNKIZ3LM4WR25MIRLJP
X-MailFrom: rfc-editor@rfc-editor.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: ietf@robplee.co.uk, rfc-editor@rfc-editor.org, cfrg@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] [Technical Errata Reported] RFC9474 (9089)
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/DdPrAFA2dlN04F54SqrSGUsYQAw>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>
The following errata report has been submitted for RFC9474, "RSA Blind Signatures" -------------------------------------- You may review the report below and at: https://errata.rfc-editor.org/eid9089/ -------------------------------------- Type: Technical Reported by: Robert Lee <ietf@robplee.co.uk> Section 4.2 says: Original Text ------------- Steps: 1. encoded_msg = EMSA-PSS-ENCODE(msg, bit_len(n)) Corrected Text -------------- Steps: 1. encoded_msg = EMSA-PSS-ENCODE(msg, bit_len(n) - 1) Notes ----- Section 4.5 (Verification) states that verifying the unblinded signature may be done "by invoking the RSASSA-PSS-VERIFY routine defined in Section 8.1.2 of RFC8017 with (n, e) as pk, M as input_msg, and S as sig.". This runs "EMSA-PSS-VERIFY(M, EM, modBits - 1)" as Step 3. Following Section 4.2 as written will yield signatures that fail to verify with the method defined in Section 4.5 roughly 50% of the time. Instructions: ------------- This erratum is currently posted as "Reported". Please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party will log in to change the status and edit the report, if necessary. -------------------------------------- RFC9474 (draft-irtf-cfrg-rsa-blind-signatures) -------------------------------------- Title : RSA Blind Signatures Publication Date : October 2023 Author(s) : F. Denis, F. Jacobs, C. A. Wood Category : Informational Source : cfrg (irtf) Stream : IRTF Verifying Party : IRSG