[CFRG] [Editorial Errata Reported] RFC8391 (7900)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 18 April 2024 21:09 UTC

To: rfc-editor@rfc-editor.org, irsg@irtf.org, cfrg@irtf.org
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: cagdascalik@microsoft.com, ietf@huelsing.net, dbutin@cdc.informatik.tu-darmstadt.de, ietf@gazdag.de, ietf@joostrijneveld.nl, mohaisen@ieee.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240418210918.220AE7634F@rfcpa.amsl.com>
Date: Thu, 18 Apr 2024 14:09:18 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/O-KSn9lthKmvwc5ZL2dQ1Hw_Bfw>
Subject: [CFRG] [Editorial Errata Reported] RFC8391 (7900)
Precedence: list

The following errata report has been submitted for RFC8391,
"XMSS: eXtended Merkle Signature Scheme".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7900

--------------------------------------
Type: Editorial
Reported by: Çağdaş Çalık <cagdascalik@microsoft.com>

Section: 4.1.3

Original Text
-------------
An XMSS private key SK contains 2^h WOTS+ private keys, the leaf
index idx of the next WOTS+ private key that has not yet been used,
SK_PRF (an n-byte key to generate pseudorandom values for randomized
message hashing), the n-byte value root (which is the root node of
the tree and SEED), and the n-byte public seed used to pseudorandomly
generate bitmasks and hash function keys.

Corrected Text
--------------
An XMSS private key SK contains 2^h WOTS+ private keys, the leaf
index idx of the next WOTS+ private key that has not yet been used,
SK_PRF (an n-byte key to generate pseudorandom values for randomized
message hashing), the n-byte value root (which is the root node of
the tree), and SEED (the n-byte public seed used to pseudorandomly
generate bitmasks and hash function keys).

Notes
-----
SEED appearing in the parenthesis explaining the root value is confusing. It has to be paired with the explanation of it that follows.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it 
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC8391 (draft-irtf-cfrg-xmss-hash-based-signatures-12)
--------------------------------------
Title               : XMSS: eXtended Merkle Signature Scheme
Publication Date    : May 2018
Author(s)           : A. Huelsing, D. Butin, S. Gazdag, J. Rijneveld, A. Mohaisen
Category            : INFORMATIONAL
Source              : Crypto Forum Research Group
Stream              : IRTF
Verifying Party     : IRSG

[CFRG] [Editorial Errata Reported] RFC8391 (7900) RFC Errata System
Re: [CFRG] [Editorial Errata Reported] RFC8391 (7… Andreas Hülsing