[CFRG] Review of draft-irtf-cfrg-aead-limits-11
Mike Bishop <mbishop@evequefou.be> Wed, 15 July 2026 12:26 UTC
Return-Path: <mbishop@evequefou.be>
X-Original-To: cfrg@mail2.ietf.org
Delivered-To: cfrg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 303B811726339 for <cfrg@mail2.ietf.org>; Wed, 15 Jul 2026 05:26:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784118418; bh=oy6GvQrRIRKEXmefVZJU4oZ2jbTLtFAR+n+P4V38DVU=; h=From:To:Subject:Date; b=b5U9VBWOBW/KBChXUPG3LzFc3LM57irILPjGq4OyAa1xHzX6W+1BEfLHHbd33aGPF RKIKbAMYq4HdfQWlKogDhp+2y365JlJ9NxostCHrCUuBjIqceC1hm+kydE6YJugVCC xeqRAPozZXGPF8jul6rpNggPvGmjcgllb4WXAqrc=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=evequefou.be
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6R-Ujz6Y5S9t for <cfrg@mail2.ietf.org>; Wed, 15 Jul 2026 05:26:57 -0700 (PDT)
Received: from SN4PR2101CU001.outbound.protection.outlook.com (mail-southcentralusazlp170120001.outbound.protection.outlook.com [IPv6:2a01:111:f403:c10d::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A716C11726332 for <cfrg@irtf.org>; Wed, 15 Jul 2026 05:26:57 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=SSyDkooWApNxt1ttg9sF5UhR2D0Iq0gH0ZaUkEj3Lv39OETJB7g8C4dN4pMdJoBb2RTUzah0kd59de5YxXi9oXATIGWdrXf7DVUyjzzftcGM3oF0bZeZXbrC6HfQ0TLNcTZG9V48xCuCfAXFTfZlgetAS8q6r/12xNyyKYNzlg9DgVf/N5i8ZjJiU8X6jLcYfluIKWoPcf0877uITrF9937W6OOwH3QqGtQBVb2LjpOVND8OebTGgAMBAD/xO16gAAs4uxsRdTihadSqI6TCFIpV6iKdi6lvGfJjwAQlE3b/aOByA+TPSRsWbiV6+CXBKtWlABSJ20YKcZzUWtnrTg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=QEeYVXmxJSXw3Iu8ZrRwMG5SWMr+ewQEpU3pI98L7y4=; b=vXhz8dpVtRPQQajAaIOLR7nghsCBkA4IWe5OVT+v/+iEmezQyF42p4JN9Wq06RIQj7attMxdF8XPVh+3yA9r0zOOFnYEjIjgBQNMHJbrMgnBCgIS7T1kCtzKw4VSec9ZH/xVUSlIJs4xOMNG+qNlZDUahgnfS75RkVXpGJ7gg9Hw3eZSteMkW9HMoLeSO9WoYRVil2STkV2Dq9x6IjNJFzYMuJ0nKvuZab4oVoVSV/kQL0Pf4+Hg3Qsuf0BRROl5KPzw/GoaSxrKl2aqheclQMo9wcd0JjBabmZhxisIlwMLlSFLuez1yuuEMTdC3fzYa3axgRJOIA0evc0fnODovA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=evequefou.be; dmarc=pass action=none header.from=evequefou.be; dkim=pass header.d=evequefou.be; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evequefou.be; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QEeYVXmxJSXw3Iu8ZrRwMG5SWMr+ewQEpU3pI98L7y4=; b=PsVepBxg21RH2Jnc2Lok9godY4P9zP80zDovPSZzuCg3tPX2JsqvcLfRGSrxYV7LdGhGEOwf1B3dyrYb3a04Y1ihTdoqqJofUwL+K2ReLZYxug1IgwkTFpY59al3ozfgVBBcAhKbCFQWa/8nwhExSAWWrwFTjyGeG4o5oDUDymY=
Received: from IA0PPF726CD7A1F.namprd22.prod.outlook.com (2603:10b6:20f:fc04::d2b) by DS1PR22MB5907.namprd22.prod.outlook.com (2603:10b6:8:1e8::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.10; Wed, 15 Jul 2026 12:26:48 +0000
Received: from IA0PPF726CD7A1F.namprd22.prod.outlook.com ([fe80::8390:9dee:ad0:9ee0]) by IA0PPF726CD7A1F.namprd22.prod.outlook.com ([fe80::8390:9dee:ad0:9ee0%7]) with mapi id 15.21.0223.008; Wed, 15 Jul 2026 12:26:48 +0000
From: Mike Bishop <mbishop@evequefou.be>
To: "cfrg@irtf.org" <cfrg@irtf.org>
Thread-Topic: Review of draft-irtf-cfrg-aead-limits-11
Thread-Index: AQHdFE4dHSHrM2NBk0mTp0ZUD6Z6ZA==
Date: Wed, 15 Jul 2026 12:26:48 +0000
Message-ID: <IA0PPF726CD7A1F52A8C69B90B40220A03BDAF82@IA0PPF726CD7A1F.namprd22.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=evequefou.be;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: IA0PPF726CD7A1F:EE_|DS1PR22MB5907:EE_
x-ms-office365-filtering-correlation-id: 3ea94331-0311-4e6c-f4f9-08dee26c573b
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|23010399003|56012099006|18002099003|8096899003|10067099003|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:IA0PPF726CD7A1F.namprd22.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(23010399003)(56012099006)(18002099003)(8096899003)(10067099003)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_IA0PPF726CD7A1F52A8C69B90B40220A03BDAF82IA0PPF726CD7A1F_"
MIME-Version: 1.0
X-OriginatorOrg: evequefou.be
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: IA0PPF726CD7A1F.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3ea94331-0311-4e6c-f4f9-08dee26c573b
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2026 12:26:48.0580 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 41eaf50b-882d-47eb-8c4c-0b5b76a9da8f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +d3rQyN1sOkpd2B2mzmgioxPeAKp74l/OF7gaWUjCPtBRk5NwA9HpSnoFD/7DxBzmSDBnUTABLQlYAyEwPhAIg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS1PR22MB5907
Message-ID-Hash: JHKGG7MLWUGXYO66TMJTRZTUQCLR2TVX
X-Message-ID-Hash: JHKGG7MLWUGXYO66TMJTRZTUQCLR2TVX
X-MailFrom: mbishop@evequefou.be
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [CFRG] Review of draft-irtf-cfrg-aead-limits-11
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/mpZg2Evjq9GwyauEDWHULvvTOIg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>
Reasonable disclaimer — I'm not a crypto person. I'm reading this draft because an IESG-approved document is blocked on a normative reference to it, and I was concerned that it appears to have stagnated.
The document is well-formed and makes reasonable arguments, but I need to trust the authors and the CFRG for the cryptographic correctness.
Some notes/questions:
*
In Section 4, why are these definitions "roughly"? Is this the precise definition or is it not? If not, what is?
*
References:
*
CCM-MU has a 2018 date, but the URL has 2025 in its path and references papers published in 2024. Check that this reference is correct. If the numbers cited are from an older version of the paper, confirm that they're the same in the 2025 version.
*
AEBounds has a 2016 date, but the URL has 2024 in its path. Same question.
Nits:
*
Section 4
*
"underyling "
*
"blockcipher" => "block cipher"?
*
Section 6.1: "but amount of compute" => "but that amount of compute"
*
Section 8: remove comma after "assumptions,"
- [CFRG] Review of draft-irtf-cfrg-aead-limits-11 Mike Bishop
- [CFRG] Re: Review of draft-irtf-cfrg-aead-limits-… Martin Thomson