Re: aes128gcm: is the 1st example wrong?

On 2017-01-17 04:16, Martin Thomson wrote:
> On 17 January 2017 at 15:26, Manger, James
> <James.H.Manger@team.telstra.com> wrote:
>> IKM = B33e_VeFrOyIHwFTIfmesA
>> salt = sJvlboCWzB5jr8hI_q9cOQ
>>
>> Draft gives:
>> PRK = MLAQxt_DHjM15cdlyU1oUnjq7TFlzToGTkdRmvvxVBw
>>
>> But I get:
>> PRK = Mg9ErPx3DpJfkz72kj7Yvx369iqvd4Fmf7tOMTdXELo
>
> Ahh, so do I.  Strange.  I ran those examples many times.  And I even
> have unit tests against them....
>
> ...except that the unit test has the key "6Aqf1aDH8lSxLyCpoCnAqg",
> which I expect will work for you.  Fixed it in 622f21d.

FWIW, I was able to reproduce the examples with the updated code in 
<https://gist.github.com/reschke/46659c912b426dffeac41d9a21421c95>, 
modulo the change Martin mentioned (but which I don't see in Git).

WRT 
<https://greenbytes.de/tech/webdav/draft-ietf-httpbis-encryption-encoding-06.html#rfc.section.3.2>: 
it would be good if the prose mentioned that this specifies a keyid of 
"a1" in the header.

Best regards, Julian

Received on Sunday, 12 February 2017 19:48:42 UTC