[CFRG] [Technical Errata Reported] RFC9591 (9209)
rfc-editor@rfc-editor.org Wed, 07 October 2026 18:26 UTC
Received: by mx.ietf.org (Postfix) id EF7F942; Wed, 07 Oct 2026 18:26:03 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rfc-editor.org; s=mail; t=1791397564; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=rnCGoAn0QuJikl5V2xaya5kX+/K/lnHQpJv7tS1EXXw=; b=LMaDqvs+JwFNqoBE+WI+NaGpe6l1mNgKWy5ygcWMhO/b34YjpON0V3TuCwSxR9xP/6ykzG BLngx43oVLS8x7jdpO0AK18l8ee2MutPrx/vdD9F3ika4nsshRPHnR4co3hduF+KlFDI06 qcEay/OhVD1zJdody0XScs9ElDxSUYs=
Authentication-Results: ORIGINATING; auth=pass smtp.auth=mail2@ietf.org smtp.mailfrom=rfc-editor@rfc-editor.org
Received: from errata-celery-6f84c7996-wb2x7 (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id B546413A4DEF0; Wed, 7 Oct 2026 11:26:03 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: rfc-editor@rfc-editor.org
To: irsg@irtf.org, durumcrustulum@gmail.com, iang@uwaterloo.ca, ckomlo@uwaterloo.ca, caw@heapingbits.net
Date: Wed, 07 Oct 2026 18:26:03 -0000
message-id: <179139756347.12.11102975387035968615@rfc-editor.org>
Message-ID-Hash: ZS5QGV42XBARVULHZWV6IGBMQJJEQS5U
X-Message-ID-Hash: ZS5QGV42XBARVULHZWV6IGBMQJJEQS5U
X-MailFrom: rfc-editor@rfc-editor.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: rfc-editor@rfc-editor.org, cfrg@ietf.org, elichai.turkel@gmail.com
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [CFRG] [Technical Errata Reported] RFC9591 (9209)
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/R6XpnqQm92SkyrbPJ7V-HDLMuf4>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>
The following errata report has been submitted for RFC9591, "The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures" -------------------------------------- You may review the report below and at: https://errata.rfc-editor.org/eid9209/ -------------------------------------- Type: Technical Reported by: Elichai Turkel <elichai.turkel@gmail.com> Section 5.2 says: Original Text ------------- Note that the lambda_i value derived during this procedure does not change across FROST signing operations for the same signing group. As such, participants can compute it once and store it for reuse across signing sessions. Corrected Text -------------- Note that the lambda_i value derived during this procedure depends only on the participant list and the participant's identifier. As such, participants can compute lambda_i once for each participant list and store it for reuse across signing sessions that use the same participant list. Notes ----- This is mostly a clarification, as: "Signing group" is not a defined term in the document, and lambda_i is a function of the participant list of the current signing operation, which varies between sessions when min_participants < max_participants. Caching lambda_i across sessions with different participant lists yields invalid signatures Instructions: ------------- This erratum is currently posted as "Reported". Please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party will log in to change the status and edit the report, if necessary. -------------------------------------- RFC9591 (draft-irtf-cfrg-frost) -------------------------------------- Title : The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures Publication Date : June 2024 Author(s) : D. Connolly, C. Komlo, I. Goldberg, C. A. Wood Category : Informational Source : cfrg (irtf) Stream : IRTF Verifying Party : IRSG