[CFRG] [Errata Rejected] RFC8439 (6989)
RFC Errata System <rfc-editor@rfc-editor.org> Mon, 20 October 2025 22:18 UTC
Return-Path: <wwwrun@rfcpa.rfc-editor.org>
X-Original-To: cfrg@irtf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from rfcpa.rfc-editor.org (unknown [167.172.21.234]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 360C778F44A5; Mon, 20 Oct 2025 15:18:46 -0700 (PDT)
Received: by rfcpa.rfc-editor.org (Postfix, from userid 461) id E2B0EC000168; Mon, 20 Oct 2025 15:18:45 -0700 (PDT)
To: markowitz@infoseccorp.com, ynir.ietf@gmail.com, agl@google.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20251020221845.E2B0EC000168@rfcpa.rfc-editor.org>
Date: Mon, 20 Oct 2025 15:18:45 -0700
Message-ID-Hash: D7UGK62K6MM3STQCOJNW43BLC4Y2IIB2
X-Message-ID-Hash: D7UGK62K6MM3STQCOJNW43BLC4Y2IIB2
X-MailFrom: wwwrun@rfcpa.rfc-editor.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: irsg@irtf.org, cfrg@irtf.org, rfc-editor@rfc-editor.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] [Errata Rejected] RFC8439 (6989)
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/PCPEKM89wXzgqUVbVFrnhaWVQjs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>
The following errata report has been rejected for RFC8439, "ChaCha20 and Poly1305 for IETF Protocols". -------------------------------------- You may review the report below and at: https://www.rfc-editor.org/errata/eid6989 -------------------------------------- Status: Rejected Type: Technical Reported by: Mike Markowitz <markowitz@infoseccorp.com> Date Reported: 2022-06-10 Rejected by: Nick Sullivan (IRSG) Section: 2.8.2 Original Text ------------- Poly1305 r = 455e9a4057ab6080f47b42c052bac7b Corrected Text -------------- Poly1305 r = 8455e9a4057ab6080f47b42c052bac7b Notes ----- fist nibble of r appears to be missing --VERIFIER NOTES-- r in Section 2.8.2 is the clamped 128-bit little-endian integer derived from the first 16 bytes of the Poly1305 one-time key. Clamping clears the top bits (see Section 2.5.1), so the big-endian hex begins 0x0455..., and when printed as a number the leading zero nibble may be omitted, yielding 455e9a4057ab6080f47b42c052bac7b as shown in the RFC. The 0x8455e9a4 value visible in the preceding table is a pre-clamp ChaCha20 block word, not r itself. This report conflates the pre-clamp word with the post-clamp r. Refs: RFC 8439 Section 2.5.1 and Section 2.8.2: http://www.rfc-editor.org/rfc/rfc8439.html -------------------------------------- RFC8439 (draft-nir-cfrg-rfc7539bis-04) -------------------------------------- Title : ChaCha20 and Poly1305 for IETF Protocols Publication Date : June 2018 Author(s) : Y. Nir, A. Langley Category : INFORMATIONAL Source : Crypto Forum Research Group Stream : IRTF Verifying Party : IRSG
- [CFRG] [Errata Rejected] RFC8439 (6989) RFC Errata System