errata logo graphic

Found 1 record.

Status: Reported (1)

RFC6803, "Camellia Encryption for Kerberos 5", November 2012

Source of RFC: krb-wg (sec)

Errata ID: 4326

Status: Reported
Type: Technical

Reported By: Greg Hudson
Date Reported: 2015-04-02

Section 10 says:

   Sample encryptions (all using the default cipher state):

   Plaintext: (empty)
   128-bit Camellia key:
       1D C4 6A 8D 76 3F 4F 93 74 2B CB A3 38 75 76 C3
   Random confounder:
       B6 98 22 A1 9A 6B 09 C0 EB C8 55 7D 1F 1B 6C 0A
   Ciphertext:
       C4 66 F1 87 10 69 92 1E DB 7C 6F DE 24 4A 52 DB
       0B A1 0E DC 19 7B DB 80 06 65 8C A3 CC CE 6E B8

   Plaintext: 1
   Random confounder:
       6F 2F C3 C2 A1 66 FD 88 98 96 7A 83 DE 95 96 D9
   128-bit Camellia key:
       50 27 BC 23 1D 0F 3A 9D 23 33 3F 1C A6 FD BE 7C
   Ciphertext:
       84 2D 21 FD 95 03 11 C0 DD 46 4A 3F 4B E8 D6 DA
       88 A5 6D 55 9C 9B 47 D3 F9 A8 50 67 AF 66 15 59
       B8

   Plaintext: 9 bytesss
   Random confounder:
       A5 B4 A7 1E 07 7A EE F9 3C 87 63 C1 8F DB 1F 10
   128-bit Camellia key:
       A1 BB 61 E8 05 F9 BA 6D DE 8F DB DD C0 5C DE A0
   Ciphertext:
       61 9F F0 72 E3 62 86 FF 0A 28 DE B3 A3 52 EC 0D
       0E DF 5C 51 60 D6 63 C9 01 75 8C CF 9D 1E D3 3D
       71 DB 8F 23 AA BF 83 48 A0

   Plaintext: 13 bytes byte
   Random confounder:
       19 FE E4 0D 81 0C 52 4B 5B 22 F0 18 74 C6 93 DA
   128-bit Camellia key:
       2C A2 7A 5F AF 55 32 24 45 06 43 4E 1C EF 66 76
   Ciphertext:
       B8 EC A3 16 7A E6 31 55 12 E5 9F 98 A7 C5 00 20
       5E 5F 63 FF 3B B3 89 AF 1C 41 A2 1D 64 0D 86 15
       C9 ED 3F BE B0 5A B6 AC B6 76 89 B5 EA

   Plaintext: 30 bytes bytes bytes bytes byt 
   Random confounder:
       CA 7A 7A B4 BE 19 2D AB D6 03 50 6D B1 9C 39 E2
   128-bit Camellia key:
       78 24 F8 C1 6F 83 FF 35 4C 6B F7 51 5B 97 3F 43
   Ciphertext:
       A2 6A 39 05 A4 FF D5 81 6B 7B 1E 27 38 0D 08 09
       0C 8E C1 F3 04 49 6E 1A BD CD 2B DC D1 DF FC 66
       09 89 E1 17 A7 13 DD BB 57 A4 14 6C 15 87 CB A4
       35 66 65 59 1D 22 40 28 2F 58 42 B1 05 A5

   Plaintext: (empty)
   Random confounder:
       3C BB D2 B4 59 17 94 10 67 F9 65 99 BB 98 92 6C
   256-bit Camellia key:
       B6 1C 86 CC 4E 5D 27 57 54 5A D4 23 39 9F B7 03
       1E CA B9 13 CB B9 00 BD 7A 3C 6D D8 BF 92 01 5B
   Ciphertext:
       03 88 6D 03 31 0B 47 A6 D8 F0 6D 7B 94 D1 DD 83
       7E CC E3 15 EF 65 2A FF 62 08 59 D9 4A 25 92 66

   Plaintext: 1
   Random confounder:
       DE F4 87 FC EB E6 DE 63 46 D4 DA 45 21 BB A2 D2
   256-bit Camellia key:
       1B 97 FE 0A 19 0E 20 21 EB 30 75 3E 1B 6E 1E 77
       B0 75 4B 1D 68 46 10 35 58 64 10 49 63 46 38 33
   Ciphertext:
       2C 9C 15 70 13 3C 99 BF 6A 34 BC 1B 02 12 00 2F
       D1 94 33 87 49 DB 41 35 49 7A 34 7C FC D9 D1 8A
       12

   Plaintext: 9 bytesss
   Random confounder:
       AD 4F F9 04 D3 4E 55 53 84 B1 41 00 FC 46 5F 88
   256-bit Camellia key:
       32 16 4C 5B 43 4D 1D 15 38 E4 CF D9 BE 80 40 FE
       8C 4A C7 AC C4 B9 3D 33 14 D2 13 36 68 14 7A 05
   Ciphertext:
       9C 6D E7 5F 81 2D E7 ED 0D 28 B2 96 35 57 A1 15
       64 09 98 27 5B 0A F5 15 27 09 91 3F F5 2A 2A 9C
       8E 63 B8 72 F9 2E 64 C8 39

   Plaintext: 13 bytes byte
   Random confounder:
       CF 9B CA 6D F1 14 4E 0C 0A F9 B8 F3 4C 90 D5 14
   256-bit Camellia key:
       B0 38 B1 32 CD 8E 06 61 22 67 FA B7 17 00 66 D8
       8A EC CB A0 B7 44 BF C6 0D C8 9B CA 18 2D 07 15
   Ciphertext:
       EE EC 85 A9 81 3C DC 53 67 72 AB 9B 42 DE FC 57
       06 F7 26 E9 75 DD E0 5A 87 EB 54 06 EA 32 4C A1
       85 C9 98 6B 42 AA BE 79 4B 84 82 1B EE

   Plaintext: 30 bytes bytes bytes bytes byt
   Random confounder:
       64 4D EF 38 DA 35 00 72 75 87 8D 21 68 55 E2 28
   256-bit Camellia key:
       CC FC D3 49 BF 4C 66 77 E8 6E 4B 02 B8 EA B9 24
       A5 46 AC 73 1C F9 BF 69 89 B9 96 E7 D6 BF BB A7
   Ciphertext:
       0E 44 68 09 85 85 5F 2D 1F 18 12 52 9C A8 3B FD
       8E 34 9D E6 FD 9A DA 0B AA A0 48 D6 8E 26 5F EB
       F3 4A D1 25 5A 34 49 99 AD 37 14 68 87 A6 C6 84
       57 31 AC 7F 46 37 6A 05 04 CD 06 57 14 74

It should say:

   Sample encryptions (all using the default cipher state):

   Plaintext: (empty)
   Random confounder:
       B6 98 22 A1 9A 6B 09 C0 EB C8 55 7D 1F 1B 6C 0A
   128-bit Camellia key:
       1D C4 6A 8D 76 3F 4F 93 74 2B CB A3 38 75 76 C3
   Key usage: 0
   Ciphertext:
       C4 66 F1 87 10 69 92 1E DB 7C 6F DE 24 4A 52 DB
       0B A1 0E DC 19 7B DB 80 06 65 8C A3 CC CE 6E B8

   Plaintext: 1
   Random confounder:
       6F 2F C3 C2 A1 66 FD 88 98 96 7A 83 DE 95 96 D9
   128-bit Camellia key:
       50 27 BC 23 1D 0F 3A 9D 23 33 3F 1C A6 FD BE 7C
   Key usage: 1
   Ciphertext:
       84 2D 21 FD 95 03 11 C0 DD 46 4A 3F 4B E8 D6 DA
       88 A5 6D 55 9C 9B 47 D3 F9 A8 50 67 AF 66 15 59
       B8

   Plaintext: 9 bytesss
   Random confounder:
       A5 B4 A7 1E 07 7A EE F9 3C 87 63 C1 8F DB 1F 10
   128-bit Camellia key:
       A1 BB 61 E8 05 F9 BA 6D DE 8F DB DD C0 5C DE A0
   Key usage: 2
   Ciphertext:
       61 9F F0 72 E3 62 86 FF 0A 28 DE B3 A3 52 EC 0D
       0E DF 5C 51 60 D6 63 C9 01 75 8C CF 9D 1E D3 3D
       71 DB 8F 23 AA BF 83 48 A0

   Plaintext: 13 bytes byte
   Random confounder:
       19 FE E4 0D 81 0C 52 4B 5B 22 F0 18 74 C6 93 DA
   128-bit Camellia key:
       2C A2 7A 5F AF 55 32 24 45 06 43 4E 1C EF 66 76
   Key usage: 3
   Ciphertext:
       B8 EC A3 16 7A E6 31 55 12 E5 9F 98 A7 C5 00 20
       5E 5F 63 FF 3B B3 89 AF 1C 41 A2 1D 64 0D 86 15
       C9 ED 3F BE B0 5A B6 AC B6 76 89 B5 EA

   Plaintext: 30 bytes bytes bytes bytes byt 
   Random confounder:
       CA 7A 7A B4 BE 19 2D AB D6 03 50 6D B1 9C 39 E2
   128-bit Camellia key:
       78 24 F8 C1 6F 83 FF 35 4C 6B F7 51 5B 97 3F 43
   Key usage: 4
   Ciphertext:
       A2 6A 39 05 A4 FF D5 81 6B 7B 1E 27 38 0D 08 09
       0C 8E C1 F3 04 49 6E 1A BD CD 2B DC D1 DF FC 66
       09 89 E1 17 A7 13 DD BB 57 A4 14 6C 15 87 CB A4
       35 66 65 59 1D 22 40 28 2F 58 42 B1 05 A5

   Plaintext: (empty)
   Random confounder:
       3C BB D2 B4 59 17 94 10 67 F9 65 99 BB 98 92 6C
   256-bit Camellia key:
       B6 1C 86 CC 4E 5D 27 57 54 5A D4 23 39 9F B7 03
       1E CA B9 13 CB B9 00 BD 7A 3C 6D D8 BF 92 01 5B
   Key usage: 0
   Ciphertext:
       03 88 6D 03 31 0B 47 A6 D8 F0 6D 7B 94 D1 DD 83
       7E CC E3 15 EF 65 2A FF 62 08 59 D9 4A 25 92 66

   Plaintext: 1
   Random confounder:
       DE F4 87 FC EB E6 DE 63 46 D4 DA 45 21 BB A2 D2
   256-bit Camellia key:
       1B 97 FE 0A 19 0E 20 21 EB 30 75 3E 1B 6E 1E 77
       B0 75 4B 1D 68 46 10 35 58 64 10 49 63 46 38 33
   Key usage: 1
   Ciphertext:
       2C 9C 15 70 13 3C 99 BF 6A 34 BC 1B 02 12 00 2F
       D1 94 33 87 49 DB 41 35 49 7A 34 7C FC D9 D1 8A
       12

   Plaintext: 9 bytesss
   Random confounder:
       AD 4F F9 04 D3 4E 55 53 84 B1 41 00 FC 46 5F 88
   256-bit Camellia key:
       32 16 4C 5B 43 4D 1D 15 38 E4 CF D9 BE 80 40 FE
       8C 4A C7 AC C4 B9 3D 33 14 D2 13 36 68 14 7A 05
   Key usage: 2
   Ciphertext:
       9C 6D E7 5F 81 2D E7 ED 0D 28 B2 96 35 57 A1 15
       64 09 98 27 5B 0A F5 15 27 09 91 3F F5 2A 2A 9C
       8E 63 B8 72 F9 2E 64 C8 39

   Plaintext: 13 bytes byte
   Random confounder:
       CF 9B CA 6D F1 14 4E 0C 0A F9 B8 F3 4C 90 D5 14
   256-bit Camellia key:
       B0 38 B1 32 CD 8E 06 61 22 67 FA B7 17 00 66 D8
       8A EC CB A0 B7 44 BF C6 0D C8 9B CA 18 2D 07 15
   Key usage: 3
   Ciphertext:
       EE EC 85 A9 81 3C DC 53 67 72 AB 9B 42 DE FC 57
       06 F7 26 E9 75 DD E0 5A 87 EB 54 06 EA 32 4C A1
       85 C9 98 6B 42 AA BE 79 4B 84 82 1B EE

   Plaintext: 30 bytes bytes bytes bytes byt
   Random confounder:
       64 4D EF 38 DA 35 00 72 75 87 8D 21 68 55 E2 28
   256-bit Camellia key:
       CC FC D3 49 BF 4C 66 77 E8 6E 4B 02 B8 EA B9 24
       A5 46 AC 73 1C F9 BF 69 89 B9 96 E7 D6 BF BB A7
   Key usage: 4
   Ciphertext:
       0E 44 68 09 85 85 5F 2D 1F 18 12 52 9C A8 3B FD
       8E 34 9D E6 FD 9A DA 0B AA A0 48 D6 8E 26 5F EB
       F3 4A D1 25 5A 34 49 99 AD 37 14 68 87 A6 C6 84
       57 31 AC 7F 46 37 6A 05 04 CD 06 57 14 74

Notes:

The encryption test vectors were missing key usage numbers.


Report New Errata