Reported By: Dick Franks
Date Reported: 2013-10-27
Verifier Name: Nevil Brownlee
Date Verified: 2014-02-03

Section 7.1.2 says:

Parameters a and b take the following values in this example:
a = 7
a = 0x7
b = 43308876546767276905765904595650931995\\
942111794451039583252968842033849580414
b = 0x5FBFF498AA938CE739B8E022FBAFEF40563\\
F6E6A3472FC2A514C0CE9DAE23B7E

It should say:

Parameters a and b take the following values in this example:
a = 57896044618658097711785492504343953926\\
634992332820282019728792003956564821034 (-7 mod p)
a = 0x8000000000000000000000000000\\
00000000000000000000000000000000042A
b = 43308876546767276905765904595650931995\\
942111794451039583252968842033849580414
b = 0x5FBFF498AA938CE739B8E022FBAFEF40563\\
F6E6A3472FC2A514C0CE9DAE23B7E

Notes:

The elliptic curve coefficient 'a' in section 7.1.2 is incorrectly defined, with the result that the generator point P in section 7.1.5 fails to satisfy the congruence relationship (1) in section 5.1.

The mistake emanates from the appendix in the GOST R 34.10-2001 standard.

Defining a to be ( -7 mod p ) restores consistency, at least to the extent that the generator point P lies on the specified curve.

Errata ID: 2304

Status: Verified
Type: Editorial

Reported By: Vasily Dolmatov
Date Reported: 2010-06-17
Verifier Name: Nevil Brownlee
Date Verified: 2013-03-16

Section 9.1 says:

[GOST3411] "Information technology. Cryptographic Data
Security. Hashing function.", GOST R 34.10-94,
Gosudarstvennyi Standard of Russian Federation,
Government Committee of Russia for Standards, 1994.
(In Russian)

It should say:

[GOST3411] "Information technology. Cryptographic Data
Security. Hashing function.", GOST R 34.11-94,
Gosudarstvennyi Standard of Russian Federation,
Government Committee of Russia for Standards, 1994.
(In Russian)