Search RFCs

RFC Editor

Found 4 records.

Status:Verified (4)

RFC 8018, "PKCS #5: Password-Based Cryptography Specification Version 2.1", January 2017

Note: This RFC has been updated byRFC 9579, RFC 9879

Errata ID:5808
Status: Verified
Type: Technical
Publication Format(s) : TEXT
Reported By: Russ Housley
Date Reported: 2019-08-13
Verifier Name: Benjamin Kaduk
Date Verified: 2019-08-22

Section Appendix C says:

   PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {     {NULL IDENTIFIED BY id-hmacWithSHA1},     {NULL IDENTIFIED BY id-hmacWithSHA224},     {NULL IDENTIFIED BY id-hmacWithSHA256},     {NULL IDENTIFIED BY id-hmacWithSHA384},     {NULL IDENTIFIED BY id-hmacWithSHA512},     {NULL IDENTIFIED BY id-hmacWithSHA512-224},     {NULL IDENTIFIED BY id-hmacWithSHA512-256},     ...   }

It should say:

   PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {     {NULL IDENTIFIED BY id-hmacWithSHA1}        |     {NULL IDENTIFIED BY id-hmacWithSHA224}      |     {NULL IDENTIFIED BY id-hmacWithSHA256}      |     {NULL IDENTIFIED BY id-hmacWithSHA384}      |     {NULL IDENTIFIED BY id-hmacWithSHA512}      |     {NULL IDENTIFIED BY id-hmacWithSHA512-224}  |     {NULL IDENTIFIED BY id-hmacWithSHA512-256},     ...   }

Notes:

For the ASN.1 Module to compile properly, six commas need to be replaced with "|" in the definition of PBKDF2-PRFs.

Errata ID:5809
Status: Verified
Type: Technical
Publication Format(s) : TEXT
Reported By: Russ Housley
Date Reported: 2019-08-13
Verifier Name: Benjamin Kaduk
Date Verified: 2019-08-22

Section Appendix C says:

   SupportingAlgorithms ALGORITHM-IDENTIFIER ::= {      {NULL IDENTIFIED BY id-hmacWithSHA1}                   |      {OCTET STRING (SIZE(8)) IDENTIFIED BY desCBC}          |      {OCTET STRING (SIZE(8)) IDENTIFIED BY des-EDE3-CBC}    |      {RC2-CBC-Parameter IDENTIFIED BY rc2CBC}               |      {RC5-CBC-Parameters IDENTIFIED BY rc5-CBC-PAD},        |      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes128-CBC-PAD} |      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes192-CBC-PAD} |      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes256-CBC-PAD},       ...   }

It should say:

   SupportingAlgorithms ALGORITHM-IDENTIFIER ::= {      {NULL IDENTIFIED BY id-hmacWithSHA1}                   |      {OCTET STRING (SIZE(8)) IDENTIFIED BY desCBC}          |      {OCTET STRING (SIZE(8)) IDENTIFIED BY des-EDE3-CBC}    |      {RC2-CBC-Parameter IDENTIFIED BY rc2CBC}               |      {RC5-CBC-Parameters IDENTIFIED BY rc5-CBC-PAD}         |      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes128-CBC-PAD} |      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes192-CBC-PAD} |      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes256-CBC-PAD},       ...   }

Notes:

For the ASN.1 Module to compile properly, the extra comma needs to be removed in the definition of SupportingAlgorithms.

Errata ID:6156
Status: Verified
Type: Editorial
Publication Format(s) : TEXT
Reported By: Triton Circonflexe
Date Reported: 2020-05-03
Verifier Name: Benjamin Kaduk
Date Verified: 2020-05-07

Section Appendix A.2 says:

      PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {        {NULL IDENTIFIED BY id-hmacWithSHA1},        {NULL IDENTIFIED BY id-hmacWithSHA224},        {NULL IDENTIFIED BY id-hmacWithSHA256},        {NULL IDENTIFIED BY id-hmacWithSHA384},        {NULL IDENTIFIED BY id-hmacWithSHA512},        {NULL IDENTIFIED BY id-hmacWithSHA512-224},        {NULL IDENTIFIED BY id-hmacWithSHA512-256},        ...      }

It should say:

      PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {        {NULL IDENTIFIED BY id-hmacWithSHA1}        |        {NULL IDENTIFIED BY id-hmacWithSHA224}      |        {NULL IDENTIFIED BY id-hmacWithSHA256}      |        {NULL IDENTIFIED BY id-hmacWithSHA384}      |        {NULL IDENTIFIED BY id-hmacWithSHA512}      |        {NULL IDENTIFIED BY id-hmacWithSHA512-224}  |        {NULL IDENTIFIED BY id-hmacWithSHA512-256},        ...      }

Notes:

For the ASN.1 Module to compile properly, six commas need to be replaced with "|" in the definition of PBKDF2-PRFs.
Errata 5808 targets the complete ASN.1 module, here this is just an extract copied in PBKDF2 description.

Errata ID:8318
Status: Verified
Type: Editorial
Publication Format(s) : TEXT
Reported By: Roman Donchenko
Date Reported: 2025-02-28
Verifier Name: RFC Editor
Date Verified: 2025-03-07

Section A.5 says:

Examples of underlying encryption schemes are given in Appendix B.3.

It should say:

Examples of underlying message authentication schemes are given in Appendix B.3.

Notes:

The paragraph this sentence is in describes the messageAuthScheme field, and the referenced appendix covers message authentication schemes.

Report New Errata