Re: [Crypto-panel] Request for reviews: "Properties of AEAD Algorithms"

[Russ Housley <[e-mail]>]

Document: draft-irtf-cfrg-aead-properties-03
Reviewer: Russ Housley
Review Date: 2024-02-12


The CFRG Chairs asked the Crypto Panel to review this document.
I am providing one review.  There may be others.


Summary:

This document gives high-level definitions of AEAD algorithm properties.


Major Concerns:

Section 4.3.5: [RFC5116] is not an appropriate reference for AES-GCM.
Please consider:

   Dworkin, M., "NIST Special Publication 800-38D: Recommendation for
   Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC,"
   U.S. National Institute of Standards and Technology.
   http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf

Section 4.4.9: This subsection seems very different than the others.
There is not an example AEAD that offers this property.  If you really
want to keep this subsection, please provide more discussion about The
usefulness of a Zero-Knowledge proofs in an AEAD algorithm.


Minor Concerns:

Section 1.1: Please spell out "MAC" the first time it is used.

Section 1.2: RFC 2119 is referenced in Section 3, but the terms are used
before they are introduced.

Section 4.4.1: I do not understand the need for "MAY".  Please use "may".


Nits:

Abstract: s/ in the field/ in the terminology used by researchers/

Section 1: s/is an extension of authenticated encryption, which//

Section 1.1: s/Most AEAD algorithms usually/Most AEAD algorithms/

Section 1.2: s/In the following document/In this document/

Section 1.2: s/ document's objective/ objective of this document/