[CFRG] [Editorial Errata Reported] RFC9497 (8720)

RFC Errata System <rfc-editor@rfc-editor.org> Tue, 27 January 2026 18:14 UTC

To: rfc-editor@rfc-editor.org, irsg@irtf.org, cfrg@irtf.org
From: RFC Errata System <rfc-editor@rfc-editor.org>
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20260127181416.6DB19C000CE0@rfcpa.rfc-editor.org>
Date: Tue, 27 Jan 2026 10:14:16 -0800
Message-ID-Hash: BQSK2V3DVM2D2LED75RLSOHKIWYZSIFN
CC: alex.davidson92@gmail.com, armfazh@cloudflare.com
Precedence: list
Subject: [CFRG] [Editorial Errata Reported] RFC9497 (8720)
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/aRZcvPYIDI0as0WohMAV0c2nWmE>

The following errata report has been submitted for RFC9497,
"Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups".

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid8720

--------------------------------------
Type: Editorial
Reported by: Nick Sullivan <nicholas.sullivan+ietf@gmail.com>

Section: Appendix A

Original Text
-------------
EvaluationElement

Corrected Text
--------------
EvaluatedElement

Notes
-----
The test vector field name "EvaluationElement" is inconsistent with the RFC body, which uses "evaluatedElement" throughout (Sections 3.3.1-3.3.3). The Appendix A header correctly defines "EvaluatedElement" but the test vector data entries use "EvaluationElement" instead.

Affected locations (all within Appendix A test vectors):
- A.1.1.1, A.1.1.2 (ristretto255-SHA512 OPRF): 2 occurrences
- A.1.2.1, A.1.2.2, A.1.2.3 (ristretto255-SHA512 VOPRF): 4 occurrences
- A.1.3.1, A.1.3.2, A.1.3.3 (ristretto255-SHA512 POPRF): 3 occurrences
- A.2.1.1, A.2.1.2 (decaf448-SHAKE256 OPRF): 2 occurrences
- A.2.2.1, A.2.2.2, A.2.2.3 (decaf448-SHAKE256 VOPRF): 4 occurrences
- A.2.3.1, A.2.3.2, A.2.3.3 (decaf448-SHAKE256 POPRF): 3 occurrences
- A.3.1.1, A.3.1.2 (P256-SHA256 OPRF): 2 occurrences
- A.3.2.1, A.3.2.2, A.3.2.3 (P256-SHA256 VOPRF): 4 occurrences
- A.3.3.1, A.3.3.2, A.3.3.3 (P256-SHA256 POPRF): 3 occurrences
- A.4.1.1, A.4.1.2 (P384-SHA384 OPRF): 2 occurrences
- A.4.2.1, A.4.2.2, A.4.2.3 (P384-SHA384 VOPRF): 4 occurrences
- A.4.3.1, A.4.3.2, A.4.3.3 (P384-SHA384 POPRF): 3 occurrences
- A.5.1.1, A.5.1.2 (P521-SHA512 OPRF): 2 occurrences
- A.5.2.1, A.5.2.2, A.5.2.3 (P521-SHA512 VOPRF): 4 occurrences
- A.5.3.1, A.5.3.2, A.5.3.3 (P521-SHA512 POPRF): 3 occurrences

Total: 45 occurrences across all test vectors.

Supersedes EID 8575 (rejected) which proposed fixing the header instead of the data.

Instructions:
-------------
This erratum is currently posted as "Reported". (If it is spam, it 
will be removed shortly by the RFC Production Center.) Please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party  
will log in to change the status and edit the report, if necessary.

--------------------------------------
RFC9497 (draft-irtf-cfrg-voprf-21)
--------------------------------------
Title               : Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups
Publication Date    : December 2023
Author(s)           : A. Davidson, A. Faz-Hernandez, N. Sullivan, C. A. Wood
Category            : INFORMATIONAL
Source              : Crypto Forum Research Group
Stream              : IRTF
Verifying Party     : IRSG

[CFRG] [Editorial Errata Reported] RFC9497 (8720) RFC Errata System