RFC 4880, "OpenPGP Message Format", November 2007

Note: This RFC has been updated by RFC 5581

Errata ID: 2228
Status: Rejected
Type: Technical
Publication Format(s) : TEXT
Reported By: Constantin Hagemeier
Date Reported: 2010-04-28
Rejected by: Sean Turner
Date Rejected: 2010-07-20

Section 5.13. says:

   The plaintext of the data to be encrypted is passed through the SHA-1
   hash function, and the result of the hash is appended to the
   plaintext in a Modification Detection Code packet.  The input to the
   hash function includes the prefix data described above; it includes
   all of the plaintext, and then also includes two octets of values
   0xD3, 0x14.  These represent the encoding of a Modification Detection
   Code packet tag and length field of 20 octets.

It should say:

   The concatination of the prefix data descibed above, the plaintext to
   be encrypted and two octets of values 0xD3, 0x14 (These represent the
   encoding of a Modification Detection Code packet tag and length field
   of 20 octets) is passed through the SHA-1 hash function.

Notes:

The text is misleading and contradicting.
--VERIFIER NOTES--
Erratum is incorrect.

Report New Errata