RFC 3394, "Advanced Encryption Standard (AES) Key Wrap Algorithm", September 2002Source of RFC: smime (sec)
Errata ID: 6942
Publication Format(s) : TEXT
Reported By: Samuel Lee
Date Reported: 2022-04-25
Section 2.1 says:
R[i] An array of 64-bit registers where i = 0, 1, 2, ..., n A[t], R[i][t] The contents of registers A and R[i] after encryption step t.
It should say:
R[i] An array of 64-bit registers where i = 1, 2, ..., n A[t], R[t][i] The contents of registers A and R[i] after encryption step t.
1) There are n 64-bit registers indexed R to R[n] in the algorithms in section 2.2.
2) The notation of the algorithms in section 2.2 dereference R using the step as the first index, and the index of the register from 1 to n as the second index