[TLS] [Errata Verified] RFC8446 (8411)

RFC Errata System <rfc-editor@rfc-editor.org> Fri, 09 May 2025 13:10 UTC

Return-Path: <wwwrun@rfcpa.rfc-editor.org>
X-Original-To: tls@ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from rfcpa.rfc-editor.org (unknown [167.172.21.234]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 90C4026D4943; Fri, 9 May 2025 06:10:30 -0700 (PDT)
Received: by rfcpa.rfc-editor.org (Postfix, from userid 461) id 454BE1D8050; Fri, 9 May 2025 06:10:30 -0700 (PDT)
To: albin.johansson@vector.com, ekr@rtfm.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Content-Type: text/plain; charset="UTF-8"
Message-Id: <20250509131030.454BE1D8050@rfcpa.rfc-editor.org>
Date: Fri, 09 May 2025 06:10:30 -0700
Message-ID-Hash: M7AEEYGZOS6ZPJUQTJHJ3C2T4LJ74S6G
X-Message-ID-Hash: M7AEEYGZOS6ZPJUQTJHJ3C2T4LJ74S6G
X-MailFrom: wwwrun@rfcpa.rfc-editor.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: paul.wouters@aiven.io, iesg@ietf.org, tls@ietf.org, iana@iana.org, rfc-editor@rfc-editor.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] [Errata Verified] RFC8446 (8411)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/hptGTupiSNrop0I2DzWycJaA4PY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

The following errata report has been verified for RFC8446,
"The Transport Layer Security (TLS) Protocol Version 1.3". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid8411

--------------------------------------
Status: Verified
Type: Technical

Reported by: Albin Johansson <albin.johansson@vector.com>
Date Reported: 2025-05-08
Verified by: Paul Wouters (IESG)

Section: 4.2.7

Original Text
-------------
struct {
    NamedGroup named_group_list<2..2^16-1>;
} NamedGroupList;

Corrected Text
--------------
struct {
    NamedGroup named_group_list<2..2^16-2>;
} NamedGroupList;

Notes
-----
The specified maximum legal length of the named_group_list vector in the NamedGroupList structure is 2^16-1 bytes. This is invalid because NamedGroup is an enum that occupies two bytes, but 2^16-1 is not an exact multiple of the element size (2 bytes), as required in Section 3.4. It appears that the intended upper bound should be 2^16-2 bytes instead.

AD note: This is scheduled for the bis document via https://github.com/tlswg/tls13-spec/pull/1380 

--------------------------------------
RFC8446 (draft-ietf-tls-tls13-28)
--------------------------------------
Title               : The Transport Layer Security (TLS) Protocol Version 1.3
Publication Date    : August 2018
Author(s)           : E. Rescorla
Category            : PROPOSED STANDARD
Source              : Transport Layer Security
Stream              : IETF
Verifying Party     : IESG