Found 1 record.

Status: Rejected (1)

RFC 3610, "Counter with CBC-MAC (CCM)", September 2003

Errata ID: 6822
Status: Rejected
Type: Technical
Publication Format(s) : TEXT
Reported By: Juergen Koeppel
Date Reported: 2022-01-24
Rejected by: Adrian Farrel
Date Rejected: 2022-01-27

Section 2.2 says:

First two octets   Followed by       Comment
    -----------------  ----------------  -------------------------------
    0x0000             Nothing           Reserved
    0x0001 ... 0xFEFF  Nothing           For 0 < l(a) < (2^16 - 2^8)
    0xFF00 ... 0xFFFD  Nothing           Reserved
    0xFFFE             4 octets of l(a)  For (2^16 - 2^8) <= l(a) < 2^32
    0xFFFF             8 octets of l(a)  For 2^32 <= l(a) < 2^64

It should say:

First two octets   Followed by       Comment
    -----------------  ----------------  -------------------------------
    0x0000             Nothing           Reserved
    0x0001 ... 0xFEFF  Nothing           For 0 < l(a) < (2^16 - 2^8)
    0xFF00 ... 0xFFFD  Nothing           Reserved
    0xFFFE             4 octets of l(a)  For (2^16 - 2^8) <= l(a) < 2^32
    0xFFFF             6 octets of l(a)  For 2^32 <= l(a) < 2^64

Notes:

The total size of the length field encoded according to the table in seciton 2.2 is 8 octets. The first column defines the first two octets. The second column defines the following octets, which in case of the first two octets being 0xFFFF is 6 octets, not 8 octets.
--VERIFIER NOTES--
Text a little earlier in Section 2.2 says:
If 2^32 <= l(a) < 2^64, then the length field is encoded as ten
octets consisting of the octets 0xff, 0xff, and eight octets encoding
l(a) in most-significant-byte-first order.
Thus, the quoted text is correct at:
0xFFFF 8 octets of l(a) For 2^32 <= l(a) < 2^64

This resolution may give rise to further issues, but they would warrant a separate errata report.

Report New Errata