[CFRG] Re: RGLC on draft-irtf-cfrg-aegis-aead

[Chris Barber <[e-mail]>]

Yes, they do. Thanks for taking my thoughts into account!

On Mon, Dec 9, 2024 at 2:11 PM Frank Denis <[e-mail]> wrote:

> Hi Chris,
>
> Thanks for reviewing the last version of the draft and for your feedback.
>
> We’ve incorporated your suggestions, and you can view the changes made
> since version 13 here:
>
> https://author-tools.ietf.org/api/iddiff?doc_1=draft-irtf-cfrg-aegis-aead&url_2=https://cfrg.github.io/draft-irtf-cfrg-aegis-aead/draft-irtf-cfrg-aegis-aead.txt
>
> Do these changes address your concerns?
>
> Kind regards,
>
> -Frank.
>
> On Dec 6, 2024, at 23:03, Chris Barber <[e-mail]> wrote:
>
> I’ve reviewed version 13 of the document and have a few suggested editorial
> changes:
>
> Section 3.2: "The decrypted message MUST be overwritten with zeros."
> Proposed change: "The decrypted message MUST be overwritten with zeros
> before being returned."
>
> Accounts for implementations where the message and ciphertext don't overlap
> and the function either returns the message or throws an exception.
> Overwriting is unnecessary if the value is no longer accessible after the
> function returns.
>
> Section 5.1: "The rate is 2 * 128 * D bits."
> Proposed change: "256 * D bits."
>
> The expanded form is unnecessary and, in my opinion, less clear.
>
> Section 5.4.2: "but absorbs R (2 * 128 * D) bits at once."
> Proposed change: "but absorbs R (= 256 * D) bits at once."
>
> Clarifies that R is equal to 256 * D and not interpreted as R * 2 * 128 * D
>
>
>