<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<br>
<div class="moz-cite-prefix">On 6/23/19 4:09 PM, Daniel Franke
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAJm83bBOtwWHZuOrFMEFNoUZp4wocTFvuviOHTE+AL0p-UUD8w@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">The translation of the AEEF ciphertext into
corresponding plaintext is given by the negotiated AEAD
algorithm; for AES-SIV, by RFC 5297. The structure of the
plaintext is defined in the draft, as a concatenation of RFC
7822 extension fields.</div>
</blockquote>
<br>
This matches the RFC. It does not match the code, which expects a
CMAC_LENGTH of 16 always and with no exceptions.<br>
<br>
Possibility: this is a temporary measure, during which time
encrypted extensions are simply not supported yet?<br>
<br>
That would also explain why as far as I can tell the cmac data is
never used.<br>
<br>
<div class="moz-signature">-- <br>
<i>"In the end; what separates a Man, from a Slave? Money? Power?
No. A Man Chooses, a Slave Obeys."</i> -- Andrew Ryan
<p>
<i>"Utopia cannot precede the Utopian.
It will exist the moment we are fit to occupy it."</i> --
Sophia Lamb
</p>
</div>
</body>
</html>