42   There are two "62351-3:2.8" events in Table A.2

Created: 16 May 2024

Status: Approval (Editoral)

Part: Part 3 (2023, Edition 2)

Links:

Page: 47

Clause: A.2

Paragraph: 1, (Table A.1)

Issue

The two mnemonics "TLS_NO_ENCRYPT-THEN-MAC" and "TLS_NO_EPSK_MODE" are reported in reversed order (i.e. they are "swapped")

Proposal

The mnemonic "TLS_NO_ENCRYPT-THEN-MAC" should be reported in the previous row (to which it actually pertains) and the mnemonic "TLS_NO_EPSK_MODE" should be reported in the next row (to which it actually pertains)

Discussion Created Status
Approval (Editorial) 26 Aug 24 Approval (Editoral)
Now the proposal is OK 16 Jul 24 Discussion (red)
Corrected figure with changes to contain:
- "No ephemeral PSK mode proposed" refers to section 8.3.2.
- "No ephemeral PSK mode proposed" changed to alarm as described in section 8.3.2.
15 Jul 24 Discussion (red)
Still a few comments:
- "No ephemeral PSK mode proposed" should refer to section 8.3.2. In my version of the standard this is already correct. In the proposed solution (tissue42.jpg) I see that it references section 8.3.1. This is wrong.
- Also "No ephemeral PSK mode proposed" should be an alarm. This is described in section 8.3.2 (first line on page 32). In the proposed solution tissue42.jpg) this is still a warning. This is not correct.
27 Jun 24 Discussion (red)
Proposal to advance as Approval (Editorial) 26 Jun 24 Discussion (red)
Proposal is right, also considering the further observation from Stefan Goeman
Clarification to be included as shown in the picture
28 May 24 Accepted
Remark: Please not that the title of the tissue is referencing the wrong table, and another issue

Ohterwise the comment is correct. The two mnemonics should be switched.

Also note that:
- Both events should be alarms. This should be changed in the table.
- According to section 7.5.7, the text for mnemonic "TLS_NO_ENCRYPT-THEN-MAC" should be "TLS session with MAC-then-encrypt detected"
16 May 24 Triage

 

Privacy | Contact | Disclaimer

Tissue DB v. 24.12.6.1