[TLS] [Errata Verified] RFC7919 (7579)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 21 March 2024 03:30 UTC

To: slimshady007@inbox.lv, dkg@fifthhorseman.net
From: RFC Errata System <rfc-editor@rfc-editor.org>
Cc: paul.wouters@aiven.io, iesg@ietf.org, tls@ietf.org, iana@iana.org, rfc-editor@rfc-editor.org
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20240321033027.1D5015BEC3F@rfcpa.amsl.com>
Date: Wed, 20 Mar 2024 20:30:27 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/XlorDTT9uN0_TkFMErQPWwkk7L4>
Subject: [TLS] [Errata Verified] RFC7919 (7579)
Precedence: list

The following errata report has been verified for RFC7919,
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid7579

--------------------------------------
Status: Verified
Type: Technical

Reported by: Tim Geiser <slimshady007@inbox.lv>
Date Reported: 2023-07-31
Verified by: Paul Wouters (IESG)

Section: Appendix A

Original Text
-------------
The primes in these finite field groups are all safe primes; that is,
a prime p is a safe prime when q = (p-1)/2 is also prime.  Where e is
the base of the natural logarithm and square brackets denote the
floor operation, the groups that initially populate this registry are
derived for a given bit length b by finding the lowest positive
integer X that creates a safe prime p where:

 p = 2^b - 2^{b-64} + {[2^{b-130} e] + X } * 2^64 - 1


Corrected Text
--------------
The primes in these finite field groups are all safe primes; that is,
a prime p is a safe prime when q = (p-1)/2 is also prime.  Where e is
the base of the natural logarithm and square brackets denote the
floor operation, the groups that initially populate this registry are
derived for a given bit length b by finding the lowest positive
integer X that creates a safe prime p where:

 p = 2^b - 2^{b-64} + {[2^{b-130} * e] + X } * 2^64 - 1


Notes
-----
The multiplication sign ('*' in ASCII) is missing in the explanatory introduction of Appendix A that describes the equation used for deriving the primes. It is correct in all five concrete derivations A.1 through A.5

--------------------------------------
RFC7919 (draft-ietf-tls-negotiated-ff-dhe-10)
--------------------------------------
Title               : Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
Publication Date    : August 2016
Author(s)           : D. Gillmor
Category            : PROPOSED STANDARD
Source              : Transport Layer Security
Stream              : IETF
Verifying Party     : IESG

[TLS] [Errata Verified] RFC7919 (7579) RFC Errata System