Re: [Crypto-panel] Request for reviews: "Properties of AEAD Algorithms"

["Stanislav V. Smyshlyaev" <[e-mail]>]

Thank you so much, Russ!

Kind regards,
Stanislav

On Mon, 12 Feb 2024 at 20:39, Russ Housley <[e-mail]> wrote:

> Document: draft-irtf-cfrg-aead-properties-03
> Reviewer: Russ Housley
> Review Date: 2024-02-12
>
>
> The CFRG Chairs asked the Crypto Panel to review this document.
> I am providing one review.  There may be others.
>
>
> Summary:
>
> This document gives high-level definitions of AEAD algorithm properties.
>
>
> Major Concerns:
>
> Section 4.3.5: [RFC5116] is not an appropriate reference for AES-GCM.
> Please consider:
>
>    Dworkin, M., "NIST Special Publication 800-38D: Recommendation for
>    Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC,"
>    U.S. National Institute of Standards and Technology.
>    http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf
>
> Section 4.4.9: This subsection seems very different than the others.
> There is not an example AEAD that offers this property.  If you really
> want to keep this subsection, please provide more discussion about The
> usefulness of a Zero-Knowledge proofs in an AEAD algorithm.
>
>
> Minor Concerns:
>
> Section 1.1: Please spell out "MAC" the first time it is used.
>
> Section 1.2: RFC 2119 is referenced in Section 3, but the terms are used
> before they are introduced.
>
> Section 4.4.1: I do not understand the need for "MAY".  Please use "may".
>
>
> Nits:
>
> Abstract: s/ in the field/ in the terminology used by researchers/
>
> Section 1: s/is an extension of authenticated encryption, which//
>
> Section 1.1: s/Most AEAD algorithms usually/Most AEAD algorithms/
>
> Section 1.2: s/In the following document/In this document/
>
> Section 1.2: s/ document's objective/ objective of this document/
>
>