Re: [Cfrg] New Version Notification for draft-mcgrew-aead-aes-cbc-hmac-sha2-03.txt

On 02/14/2014 12:12 AM, Manger, James wrote:
>> Title: Authenticated Encryption with AES-CBC and HMAC-SHA
>> Htmlized:       http://tools.ietf.org/html/draft-mcgrew-aead-aes-cbc-
>> hmac-sha2-03
> Appendix B "Alternative Interface for Legacy Encoding" isn't quite clear that "the ciphertext C, as described in Appendix A" is only C_1 || ... || C_n. It excludes C_0 (which is the IV) as the IV is a separate field.
>
> Suggested change (in two places):
> FROM
>        the initialization vector IV as defined in Appendix A,
>        the ciphertext C, as defined in Appendix A, and
>        the message authentication tag T, as defined in Section 2.1.
> TO
>        the initialization vector IV as defined in Appendix A,
>        the ciphertext excluding the IV (C_1 || ... || C_n), as defined in Appendix A, and
>        the message authentication tag T, as defined in Section 2.1.

good catch; I've made these changes.

>
> K and A are not mentioned as inputs to the decryption operation.
> Suggested change:
> FROM
>     The inputs to the decryption operation are:
>        ... IV ... C ... T
> TO
>     The inputs to the decryption operation (in addition
>     to the secret key K and associated data A) are:
>        ... IV ... C ... T
>
>
> Typo: appendix B (missing "are")
>    The inputs to the encryption operation *are* the same

Fixed, along with the other typos identified in your previous email.   
Many thanks for the quick review.

David

> --
> James Manger
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> http://www.irtf.org/mailman/listinfo/cfrg
>