[lamps] Fwd: [Errata Verified] RFC5652 (6250)

Russ Housley <housley@vigilsec.com> Fri, 07 August 2020 12:14 UTC

From: Russ Housley <housley@vigilsec.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_5661D35A-5849-4768-9705-949B88450903"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.15\))
Message-Id: <A0F6AF7A-4B6E-4832-863E-63FC2CCBBC88@vigilsec.com>
References: <20200807050034.F1740F4074E@rfc-editor.org>
To: LAMPS WG <spasm@ietf.org>
Date: Fri, 07 Aug 2020 08:14:35 -0400
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/gjiU1eeLxS2QgjHKOGefw8aw-lE>
Subject: [lamps] Fwd: [Errata Verified] RFC5652 (6250)
Precedence: list


> From: RFC Errata System <rfc-editor@rfc-editor.org>
> Subject: [Errata Verified] RFC5652 (6250)
> Date: August 7, 2020 at 1:00:34 AM EDT
> To: housley@vigilsec.com, housley@vigilsec.com
> Cc: kaduk@mit.edu, iesg@ietf.org, smime@ietf.org, rfc-editor@rfc-editor.org
> 
> The following errata report has been verified for RFC5652,
> "Cryptographic Message Syntax (CMS)". 
> 
> --------------------------------------
> You may review the report below and at:
> https://www.rfc-editor.org/errata/eid6250
> 
> --------------------------------------
> Status: Verified
> Type: Technical
> 
> Reported by: Russ Housley <housley@vigilsec.com>
> Date Reported: 2020-08-06
> Verified by: Benjamin Kaduk (IESG)
> 
> Section: 9.2
> 
> Original Text
> -------------
>   If the authAttrs field is present, the content-type attribute (as
>   described in Section 11.1) and the message-digest attribute (as
>   described in Section 11.2) MUST be included, and the input to the MAC
>   calculation process is the DER encoding of authAttrs.  A separate
>   encoding of the authAttrs field is performed for message digest
>   calculation.  The IMPLICIT [2] tag in the authAttrs field is not used
>   for the DER encoding, rather an EXPLICIT SET OF tag is used.  That
>   is, the DER encoding of the SET OF tag, rather than of the IMPLICIT
>   [2] tag, is to be included in the message digest calculation along
>   with the length and content octets of the authAttrs value.
> 
> Corrected Text
> --------------
>   If the authAttrs field is present, the content-type attribute (as
>   described in Section 11.1) and the message-digest attribute (as
>   described in Section 11.2) MUST be included, and the input to the MAC
>   calculation process is the DER encoding of authAttrs.  A separate
>   encoding of the authAttrs field is performed for message digest
>   calculation.  The IMPLICIT [2] tag in the authAttrs field is not used
>   for the DER encoding, rather an EXPLICIT SET OF tag is used.  That
>   is, the DER encoding of the SET OF tag, rather than of the IMPLICIT
>   [2] tag, is to be included in the MAC calculation along
>   with the length and content octets of the authAttrs value.
> 
> Notes
> -----
> The paragraph is talking about the input to a MAC calculation, not the input to message digest calculation.
> 
> --------------------------------------
> RFC5652 (draft-ietf-smime-rfc3852bis-00)
> --------------------------------------
> Title               : Cryptographic Message Syntax (CMS)
> Publication Date    : September 2009
> Author(s)           : R. Housley
> Category            : DRAFT STANDARD
> Source              : S/MIME Mail Security
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG

[lamps] Fwd: [Errata Verified] RFC5652 (6250) Russ Housley