RFC 4758, "Cryptographic Token Key Initialization Protocol (CT-KIP) Version 1.0 Revision 1", November 2006Source of RFC: IETF - NON WORKING GROUP
Area Assignment: sec
Errata ID: 5628
Publication Format(s) : TEXT
Reported By: Conrad Meyer
Date Reported: 2019-02-09
Section 3.5 says:
K_TOKEN = CT-KIP-PRF (R_C, "Key generation" || k || R_S, dsLen)
It should say:
K_TOKEN = CT-KIP-PRF (R_C, k || "Key generation" || R_S, dsLen)
Here the RFC is simply incorrect w.r.t. the reference implementation (RSA's proprietary software).
The corrected text matches the reference implementation.
There are several more errata along these lines. With (all) the corrections, it becomes possible to implement 3rd party RFC4758 clients and servers that interact correctly with RSA clients and servers from the RFC text.