Re: [Cfrg] New Version Notification for draft-mcgrew-aead-aes-cbc-hmac-sha2-03.txt

["Manger, James" <[e-mail]>]

> Title: Authenticated Encryption with AES-CBC and HMAC-SHA
> Htmlized:       http://tools.ietf.org/html/draft-mcgrew-aead-aes-cbc-
> hmac-sha2-03

Appendix B "Alternative Interface for Legacy Encoding" isn't quite clear that "the ciphertext C, as described in Appendix A" is only C_1 || ... || C_n. It excludes C_0 (which is the IV) as the IV is a separate field.

Suggested change (in two places):
FROM
      the initialization vector IV as defined in Appendix A,
      the ciphertext C, as defined in Appendix A, and
      the message authentication tag T, as defined in Section 2.1.
TO
      the initialization vector IV as defined in Appendix A,
      the ciphertext excluding the IV (C_1 || ... || C_n), as defined in Appendix A, and
      the message authentication tag T, as defined in Section 2.1.


K and A are not mentioned as inputs to the decryption operation.
Suggested change:
FROM
   The inputs to the decryption operation are:
      ... IV ... C ... T
TO
   The inputs to the decryption operation (in addition
   to the secret key K and associated data A) are:
      ... IV ... C ... T


Typo: appendix B (missing "are")
  The inputs to the encryption operation *are* the same

--
James Manger