KeyCzar paper incorrect?

[Maarten Bodewes]

In 6.2 the paper states (in the first and second table):

Header | IV (if any) | Encrypt(M) | Sign(header | IV | M) (if any)

This seems incorrect to me, if I look e.g. at the Java source code it seems encrypt-then-sign is used, not encrypt-and-sign:

      verifyStream.updateVerify(ciphertextChunk);


In other words, I would expect:

Header | IV (if any) | Encrypt(M) | Sign(header | IV | Encrypt(M)) (if any)

Would it be possible to update the paper, or make clear it is deprecated by now?

[Steve Weis]

You're right that this is a typo. That paper is very out of date and should probably be removed or revised completely.

Regardless, I fixed the latex source:
https://github.com/google/keyczar/commit/c0be62c27969c212a2b81ca238ea67bee23d7dea

--
You received this message because you are subscribed to the Google Groups "Keyczar Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keyczar-discu...@googlegroups.com.
To post to this group, send email to keyczar...@googlegroups.com.
Visit this group at http://groups.google.com/group/keyczar-discuss.
For more options, visit https://groups.google.com/d/optout.

[devin lundberg]

I updated https://github.com/google/keyczar/wiki/CiphertextFormat which had the same typo.