Subject: [Cfrg] [Errata Verified] RFC7664 (5754)

From: RFC Errata System <[email-masked]>
Date: Sat, 6 Jun 2020 05:49:04 -0700 (PDT)

The following errata report has been verified for RFC7664,
"Dragonfly Key Exchange". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid5754

--------------------------------------
Status: Verified
Type: Technical

Reported by: Araki Makoto <[email-masked]>
Date Reported: 2019-06-16
Verified by: Colin Perkins (IRSG)

Section: 3.2.2

Original Text
-------------
      do {
        base = H(max(Alice,Bob) | min(Alice,Bob) | password | counter)
        temp = KDF-n(seed, "Dragonfly Hunting And Pecking")
        seed = (temp mod (p - 1)) + 1

Corrected Text
--------------
      do {
        base = H(max(Alice,Bob) | min(Alice,Bob) | password | counter)
        temp = KDF-n(base, "Dragonfly Hunting And Pecking")
        seed = (temp mod (p - 1)) + 1

Notes
-----
A variable "seed" is passed to the function KDF-n before defined. It should be the variable "base" instead of "seed". The variable "base" is passed to KDF-n in Figure 1.

Verified by Kenny Paterson and Dan Harkins, June 2019. 

--------------------------------------
RFC7664 (draft-irtf-cfrg-dragonfly-08)
--------------------------------------
Title               : Dragonfly Key Exchange
Publication Date    : November 2015
Author(s)           : D. Harkins, Ed.
Category            : INFORMATIONAL
Source              : Crypto Forum Research Group
Area                : N/A
Stream              : IRTF
Verifying Party     : IRSG