Re: [Cfrg] OCB test vectors reusing nonces

["Manger, James" <[e-mail]>]

Ted,

Attached is my version of the updated test vectors for appendix A of draft-irtf-cfrg-ocb.

The first 16 {N,A,P,C} tuples use incrementing nonces.

I added one example with a 96-bit tag and a separate key (since we recommend using a single tag length with any given key). It uses the same nonce as the 128-bit tag example with the same A and P.

The final examples use incrementing nonces.

I made minor changes to the text.

--
James Manger

> -----Original Message-----
> From: Cfrg [mailto:[e-mail]] On Behalf Of Ted Krovetz
> Sent: Monday, 27 January 2014 2:11 AM
> To: [e-mail]
> Subject: Re: [Cfrg] OCB test vectors reusing nonces
> 
> 
> > For the above two reasons I think it would be worth updating the test
> vectors, despite some risk of causing a slight delay. Surely the draft
> doesn’t have to repeat much of the vetting process if only sample
> results change. I am willing to confirm new test vectors quickly.
> 
> This makes sense. I'll do it. In the coming days I'll update the OCB
> vectors as James suggested, he and I will confirm the results, and I'll
> update the draft for others to verify.
> 
> -Ted
> _______________________________________________
> Cfrg mailing list
> [e-mail]
> http://www.irtf.org/mailman/listinfo/cfrg