[Errata Verified] RFC3394 (6942)

The following errata report has been verified for RFC3394,
"Advanced Encryption Standard (AES) Key Wrap Algorithm". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6942

--------------------------------------
Status: Verified
Type: Editorial

Reported by: Samuel Lee <[email protected]>
Date Reported: 2022-04-25
Verified by: Paul Wouters (IESG)

Section: 2.1

Original Text
-------------
R[i]          An array of 64-bit registers where
                       i = 0, 1, 2, ..., n
A[t], R[i][t] The contents of registers A and R[i] after encryption
                       step t.

Corrected Text
--------------
R[i]          An array of 64-bit registers where
                       i = 1, 2, ..., n
A[t], R[t][i] The contents of registers A and R[i] after encryption
                       step t.

Notes
-----
1) There are n 64-bit registers indexed R[1] to R[n] in the algorithms in section 2.2.
2) The notation of the algorithms in section 2.2 dereference R[][] using the step as the first index, and the index of the register from 1 to n as the second index

Paul Wouters(AD): There was some talk of a better fix, but that would require new text for whole sections, which is more that what should be done in an errata.

--------------------------------------
RFC3394 (draft-ietf-smime-aes-keywrap-00)
--------------------------------------
Title               : Advanced Encryption Standard (AES) Key Wrap Algorithm
Publication Date    : September 2002
Author(s)           : J. Schaad, R. Housley
Category            : INFORMATIONAL
Source              : S/MIME Mail Security
Area                : Security
Stream              : IETF
Verifying Party     : IESG