Subject: [Cfrg] [Errata Verified] RFC8452 (5854)

From: RFC Errata System <[email-masked]>
Date: Sat, 6 Jun 2020 06:17:57 -0700 (PDT)

The following errata report has been verified for RFC8452,
"AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid5854

--------------------------------------
Status: Verified
Type: Technical

Reported by: Tony Arcieri <[email-masked]>
Date Reported: 2019-09-05
Verified by: Colin Perkins (IRSG)

Section: Appendix A

Original Text
-------------
...mulX_POLYVAL of it is 3931819bf271fada0503eb52574ca5f2.

Corrected Text
--------------
...mulX_POLYVAL of it is 3931819bf271fada0503eb52574ca572.

Notes
-----
The last hex byte is typoed (f2, should be 72).

Confirmed this was the case on the CFRG mailing list (2019-09-05)

--------------------------------------
RFC8452 (draft-irtf-cfrg-gcmsiv-09)
--------------------------------------
Title               : AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption
Publication Date    : April 2019
Author(s)           : S. Gueron, A. Langley, Y. Lindell
Category            : INFORMATIONAL
Source              : Crypto Forum Research Group
Area                : N/A
Stream              : IRTF
Verifying Party     : IRSG