RFC 9497, "Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups", December 2023

Errata ID: 8720
Status: Verified
Type: Editorial
Publication Format(s) : TEXT, PDF, HTML
Reported By: Nick Sullivan
Date Reported: 2026-01-27
Verifier Name: Nick Sullivan
Date Verified: 2026-01-28

Section Appendix A says:

EvaluationElement

It should say:

EvaluatedElement

Notes:

The test vector field name "EvaluationElement" is inconsistent with the RFC body, which uses "evaluatedElement" throughout (Sections 3.3.1-3.3.3). The Appendix A header correctly defines "EvaluatedElement" but the test vector data entries use "EvaluationElement" instead.

Affected locations (all within Appendix A test vectors):
- A.1.1.1, A.1.1.2 (ristretto255-SHA512 OPRF): 2 occurrences
- A.1.2.1, A.1.2.2, A.1.2.3 (ristretto255-SHA512 VOPRF): 4 occurrences
- A.1.3.1, A.1.3.2, A.1.3.3 (ristretto255-SHA512 POPRF): 3 occurrences
- A.2.1.1, A.2.1.2 (decaf448-SHAKE256 OPRF): 2 occurrences
- A.2.2.1, A.2.2.2, A.2.2.3 (decaf448-SHAKE256 VOPRF): 4 occurrences
- A.2.3.1, A.2.3.2, A.2.3.3 (decaf448-SHAKE256 POPRF): 3 occurrences
- A.3.1.1, A.3.1.2 (P256-SHA256 OPRF): 2 occurrences
- A.3.2.1, A.3.2.2, A.3.2.3 (P256-SHA256 VOPRF): 4 occurrences
- A.3.3.1, A.3.3.2, A.3.3.3 (P256-SHA256 POPRF): 3 occurrences
- A.4.1.1, A.4.1.2 (P384-SHA384 OPRF): 2 occurrences
- A.4.2.1, A.4.2.2, A.4.2.3 (P384-SHA384 VOPRF): 4 occurrences
- A.4.3.1, A.4.3.2, A.4.3.3 (P384-SHA384 POPRF): 3 occurrences
- A.5.1.1, A.5.1.2 (P521-SHA512 OPRF): 2 occurrences
- A.5.2.1, A.5.2.2, A.5.2.3 (P521-SHA512 VOPRF): 4 occurrences
- A.5.3.1, A.5.3.2, A.5.3.3 (P521-SHA512 POPRF): 3 occurrences

Total: 45 occurrences across all test vectors.

Supersedes EID 8575 (rejected) which proposed fixing the header instead of the data.

--VERIFIER NOTE--
Verified. Test vector field names should match RFC body terminology.

Report New Errata