Paul, You can marked this one as “verified" if you want. I submitted a PR to fix this in -rfc8446bis; see: https://github.com/tlswg/tls13-spec/pull/1380
spt > On May 8, 2025, at 4:05 AM, RFC Errata System <[email protected]> > wrote: > > The following errata report has been submitted for RFC8446, > "The Transport Layer Security (TLS) Protocol Version 1.3". > > -------------------------------------- > You may review the report below and at: > https://www.rfc-editor.org/errata/eid8411 > > -------------------------------------- > Type: Technical > Reported by: Albin Johansson <[email protected]> > > Section: 4.2.7 > > Original Text > ------------- > struct { > NamedGroup named_group_list<2..2^16-1>; > } NamedGroupList; > > Corrected Text > -------------- > struct { > NamedGroup named_group_list<2..2^16-2>; > } NamedGroupList; > > Notes > ----- > The specified maximum legal length of the named_group_list vector in the > NamedGroupList structure is 2^16-1 bytes. This is invalid because NamedGroup > is an enum that occupies two bytes, but 2^16-1 is not an exact multiple of > the element size (2 bytes), as required in Section 3.4. It appears that the > intended upper bound should be 2^16-2 bytes instead. > > Instructions: > ------------- > This erratum is currently posted as "Reported". (If it is spam, it > will be removed shortly by the RFC Production Center.) Please > use "Reply All" to discuss whether it should be verified or > rejected. When a decision is reached, the verifying party > will log in to change the status and edit the report, if necessary. > > -------------------------------------- > RFC8446 (draft-ietf-tls-tls13-28) > -------------------------------------- > Title : The Transport Layer Security (TLS) Protocol Version 1.3 > Publication Date : August 2018 > Author(s) : E. Rescorla > Category : PROPOSED STANDARD > Source : Transport Layer Security > Stream : IETF > Verifying Party : IESG
_______________________________________________ TLS mailing list -- [email protected] To unsubscribe send an email to [email protected]
