Re: [Ietf-krb-wg] CF2 test vectors for DES and 3DES

Sam Hartman <hartmans-ietf@mit.edu> Mon, 04 May 2009 19:21 UTC

Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com
Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7C07E3A6C74 for <ietfarch-krb-wg-archive@core3.amsl.com>; Mon, 4 May 2009 12:21:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.444
X-Spam-Level:
X-Spam-Status: No, score=-2.444 tagged_above=-999 required=5 tests=[AWL=0.155, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ox7p5paobsOU for <ietfarch-krb-wg-archive@core3.amsl.com>; Mon, 4 May 2009 12:21:41 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 104503A7126 for <krb-wg-archive@lists.ietf.org>; Mon, 4 May 2009 12:20:54 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.ctd.anl.gov (Postfix) with ESMTP id EC3C65C; Mon, 4 May 2009 14:22:19 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 94ED351; Mon, 4 May 2009 14:22:15 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 6641180DFD; Mon, 4 May 2009 14:22:15 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id A29C780DF1 for <ietf-krb-wg@lists.anl.gov>; Mon, 4 May 2009 14:22:13 -0500 (CDT)
Received: by mailhost.anl.gov (Postfix) id 9D97751; Mon, 4 May 2009 14:22:13 -0500 (CDT)
Delivered-To: ietf-krb-wg@anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.ctd.anl.gov (Postfix) with ESMTP id 98CE354 for <ietf-krb-wg@anl.gov>; Mon, 4 May 2009 14:22:13 -0500 (CDT)
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 939F951 for <ietf-krb-wg@anl.gov>; Mon, 4 May 2009 14:22:13 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 7D10B7CC0B4; Mon, 4 May 2009 14:22:13 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 05184-04; Mon, 4 May 2009 14:22:13 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay2.anl.gov (Postfix) with ESMTP id 562997CC0BB for <ietf-krb-wg@anl.gov>; Mon, 4 May 2009 14:22:13 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApoEAPrc/klFGcSy/2dsb2JhbADAWIYBiE6DfQWIBQ
X-IronPort-AV: E=Sophos;i="4.40,292,1238994000"; d="scan'208";a="26627940"
Received: from carter-zimmerman.suchdamage.org ([69.25.196.178]) by mailgateway.anl.gov with ESMTP; 04 May 2009 14:22:12 -0500
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 5B90C4161; Mon, 4 May 2009 15:22:11 -0400 (EDT)
To: Tom Yu <tlyu@MIT.EDU>
References: <tsl63gl7ujg.fsf@mit.edu> <ldvljpg8p1o.fsf@cathode-dark-space.mit.edu>
From: Sam Hartman <hartmans-ietf@mit.edu>
Date: Mon, 04 May 2009 15:22:11 -0400
In-Reply-To: <ldvljpg8p1o.fsf@cathode-dark-space.mit.edu> (Tom Yu's message of "Fri\, 01 May 2009 17\:57\:07 -0400")
Message-ID: <tsly6tcwu58.fsf@mit.edu>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux)
MIME-Version: 1.0
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Cc: ietf-krb-wg@anl.gov, Sam Hartman <hartmans-ietf@mit.edu>
Subject: Re: [Ietf-krb-wg] CF2 test vectors for DES and 3DES
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.11
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ietf-krb-wg-bounces@lists.anl.gov
Errors-To: ietf-krb-wg-bounces@lists.anl.gov

>>>>> "Tom" == Tom Yu <tlyu@MIT.EDU> writes:

    Tom> Sam Hartman <hartmans-ietf@MIT.EDU> writes:
    >> Folks, there seems to be yet another inconsistency between RFC
    >> 3961 and MIT regarding DES and presumably 3DES random2key
    >> operations.
    >> 
    >> MIT assumes that DES random bit strings are 7 byte strings that
    >> are expanded with parity bits.  The RFC 3961 spec assumes that
    >> you take an eight byte string and do parity fix-up.

    Tom> Actually, spec assumes both.  RFC 3961 says des-cbc-md5 uses
    Tom> des_random_to_key, but des-cbc-md4 and des-cbc-crc use
    Tom> copy-8-bytes-and-fix-parity.  It does say that the key
    Tom> generation seed length is 8 bytes for all three, which is
    Tom> inconsistent with the use of des_random_to_key (which takes
    Tom> 56 bits as input).  I suspect a copy-and-paste error.

OK, but the MIT code is still inconsistent with the spec.
We seem to do the same for all the DES enctypes.
_______________________________________________
ietf-krb-wg mailing list
ietf-krb-wg@lists.anl.gov
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg