Subject: [Cfrg] [Errata Held for Document Update] RFC7539 (4434)

From: RFC Errata System <[email-masked]>
Date: Thu, 6 Aug 2015 23:59:27 -0700 (PDT)

The following errata report has been held for document update 
for RFC7539, "ChaCha20 and Poly1305 for IETF Protocols". 

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=7539&eid=4434

--------------------------------------
Status: Held for Document Update
Type: Editorial

Reported by: ?ukasz Stelmach <[email-masked]>
Date Reported: 2015-08-05
Held by: Lars Eggert (IRSG)

Section: 2.6

Original Text
-------------
We take
the first 256 bits or the serialized state, and use those as the one-
time Poly1305 key: the first 128 bits are clamped and form "r", while
the next 128 bits become "s".

Corrected Text
--------------
We take
the first 256 bits of the serialized state, and use those as the one-
time Poly1305 key: the first 128 bits are clamped and form "r", while
the next 128 bits become "s".

Notes
-----
“We take the first 256 **or** the serialized state”. Should be **of**. 

--------------------------------------
RFC7539 (draft-irtf-cfrg-chacha20-poly1305-10)
--------------------------------------
Title               : ChaCha20 and Poly1305 for IETF Protocols
Publication Date    : May 2015
Author(s)           : Y. Nir, A. Langley
Category            : INFORMATIONAL
Source              : Crypto Forum Research Group
Area                : N/A
Stream              : IRTF
Verifying Party     : IRSG