RFC 9497, "Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups", December 2023

Errata ID: 8575
Status: Rejected
Type: Technical
Publication Format(s) : TEXT, PDF, HTML
Reported By: Charles Edward Gagnon
Date Reported: 2025-09-12
Rejected by: Nick Sullivan
Date Rejected: 2026-01-27

Section Appendix A says:

"EvaluatedElement":  The evaluated element output by BlindEvaluate(),
      a serialized Element of Ne bytes long.

It should say:

"EvaluationElement":  The evaluated element output by BlindEvaluate(),
      a serialized Element of Ne bytes long.

Notes:

To match the identifier used in all subsequent test vectors. There is still a slight inconsistency, as "EvaluatedElement" is used throughout the RFC and "EvaluationElement" is used uniquely in "Appendix A. Test Vectors".
--VERIFIER NOTES--
Rejected. The proposed fix changes the header definition to match the test vector data, but the data itself is inconsistent with the RFC body, which uses "evaluatedElement" throughout the protocol specification. The correct fix is to change the test vector field names from "EvaluationElement" to "EvaluatedElement" to align with the protocol specification. A new erratum will be filed with the correct fix.

Report New Errata