Errata Search
RFC Number:		Errata ID:
Source of RFC		Status:	All/Any Verified+Reported Verified Reported Held for Document Update Rejected
Area Acronym:	All/Any app art gen int ops rai rtg sec tsv wit	Type:	All/Any Editorial Technical
WG Acronym:		Submitter Name:
Other:	All/Any IAB INDEPENDENT IRTF Legacy Editorial	Date Submitted:
Summary Table Full Records

RFC 6287, "OCRA: OATH Challenge-Response Algorithm", June 2011

Source of RFC: IETF - NON WORKING GROUP
Area Assignment: sec

---

Errata ID: 4113
Status: Reported
Type: Editorial
Publication Format(s) : TEXT
Reported By: Marc Girault
Date Reported: 2014-09-16

Section 7 says:

R = OCRA(K, {[C] | Q | [P | S | T]})

RS = OCRA(K, [C] | QC | QS | [S | T])

OCRA(K, [C] | QC | QS | [S | T]) != RS -> STOP

RC = OCRA(K, [C] | QS | QC | [P | S | T])

OCRA(K, [C] | QS | QC | [P|S|T]) != RC -> STOP

SIGN = OCRA(K, [C] | QS | [P | T])

RS = OCRA(K, [C] | QC | QS | [T]

OCRA(K, [C] | QC | QS | [T]) != RS -> STOP 

SIGN = OCRA( K, [C] | QS | QC | [P | T])

OCRA(K, [C] | QS | QC | [P|T]) != SIGN -> STOP 

It should say:

R = CryptoFunction(K, {[C] | Q | [P | S | T]})

RS = CryptoFunction(K, [C] | QC | QS | [S | T])

CryptoFunction(K, [C] | QC | QS | [S | T]) != RS -> STOP

RC = CryptoFunction(K, [C] | QS | QC | [P | S | T])

CryptoFunction(K, [C] | QS | QC | [P|S|T]) != RC -> STOP

SIGN = CryptoFunction(K, [C] | QS | [P | T])

RS = CryptoFunction(K, [C] | QC | QS | [T]

CryptoFunction(K, [C] | QC | QS | [T]) != RS -> STOP 

SIGN = CryptoFunction( K, [C] | QS | QC | [P | T])

CryptoFunction(K, [C] | QS | QC | [P|T]) != SIGN -> STOP 

Notes:

The acronym “OCRA” is used page 5 as the output of the CryptoFunction, page 9 as the name of a (family of) algorithm(s), in diagrams of pages 11, 13, 14 and 16 as a cryptographic function. This is inconsistent.

Report New Errata