[Curdle] [Errata Verified] RFC8103 (5353)

RFC Errata System <rfc-editor@rfc-editor.org> Fri, 11 May 2018 17:40 UTC

To: pleasestand@live.com, housley@vigilsec.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: kaduk@mit.edu, iesg@ietf.org, curdle@ietf.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20180511174038.B5B73B828C6@rfc-editor.org>
Date: Fri, 11 May 2018 10:40:38 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/466ZoGjfEMHrkp7J3idyVFCZAYk>
Subject: [Curdle] [Errata Verified] RFC8103 (5353)
Precedence: list

The following errata report has been verified for RFC8103,
"Using ChaCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Syntax (CMS)". 

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata/eid5353

--------------------------------------
Status: Verified
Type: Technical

Reported by: Kevin Israel <pleasestand@live.com>
Date Reported: 2018-05-10
Verified by: Benjamin Kaduk (IESG)

Section: 6

Original Text
-------------
   The amount of encrypted data possible in a single invocation of
   AEAD_CHACHA20_POLY1305 is 2^32-1 blocks of 64 octets each, because of
   the size of the block counter field in the ChaCha20 block function.
   This gives a total of 247,877,906,880 octets, which is likely to be
   sufficient to handle the size of any CMS content type.  Note that the
   ciphertext length field in the authentication buffer will accommodate
   2^64 octets, which is much larger than necessary.

Corrected Text
--------------
   The amount of encrypted data possible in a single invocation of
   AEAD_CHACHA20_POLY1305 is 2^32-1 blocks of 64 octets each, because of
   the size of the block counter field in the ChaCha20 block function.
   This gives a total of 274,877,906,880 octets, which is likely to be
   sufficient to handle the size of any CMS content type.  Note that the
   ciphertext length field in the authentication buffer will accommodate
   2^64 octets, which is much larger than necessary.

Notes
-----
The calculated total number of octets that can be encrypted in a single invocation is incorrect. See RFC Errata, Erratum ID 4858, RFC 7539.

--------------------------------------
RFC8103 (draft-ietf-curdle-cms-chacha20-poly1305-06)
--------------------------------------
Title               : Using ChaCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Syntax (CMS)
Publication Date    : February 2017
Author(s)           : R. Housley
Category            : PROPOSED STANDARD
Source              : CURves, Deprecating and a Little more Encryption
Area                : Security
Stream              : IETF
Verifying Party     : IESG

[Curdle] [Errata Verified] RFC8103 (5353) RFC Errata System