RFC Errata
RFC 5832, "GOST R 34.10-2001: Digital Signature Algorithm", March 2010
Note: This RFC has been updated by RFC 7091
Source of RFC: INDEPENDENTSee Also: RFC 5832 w/ inline errata
Errata ID: 3768
Status: Verified
Type: Technical
Publication Format(s) : TEXT
Reported By: Dick Franks
Date Reported: 2013-10-27
Verifier Name: Nevil Brownlee
Date Verified: 2014-02-03
Section 7.1.2 says:
Parameters a and b take the following values in this example: a = 7 a = 0x7 b = 43308876546767276905765904595650931995\\ 942111794451039583252968842033849580414 b = 0x5FBFF498AA938CE739B8E022FBAFEF40563\\ F6E6A3472FC2A514C0CE9DAE23B7E
It should say:
Parameters a and b take the following values in this example: a = 57896044618658097711785492504343953926\\ 634992332820282019728792003956564821034 (-7 mod p) a = 0x8000000000000000000000000000\\ 00000000000000000000000000000000042A b = 43308876546767276905765904595650931995\\ 942111794451039583252968842033849580414 b = 0x5FBFF498AA938CE739B8E022FBAFEF40563\\ F6E6A3472FC2A514C0CE9DAE23B7E
Notes:
The elliptic curve coefficient 'a' in section 7.1.2 is incorrectly defined, with the result that the generator point P in section 7.1.5 fails to satisfy the congruence relationship (1) in section 5.1.
The mistake emanates from the appendix in the GOST R 34.10-2001 standard.
Defining a to be ( -7 mod p ) restores consistency, at least to the extent that the generator point P lies on the specified curve.