Network Working Group J. Schaad Request for Comments: 3394 Soaring Hawk Consulting Category: Informational R. Housley RSA Laboratories September 2002 Algoritmo AES Key Wrap (cifratura delle chiavi AES) Traduzione a cura di ComiSAT Brescia, Dic. 2002 (comisat@yahoo.it) Distribuita da .::http://www.rfc.altervista.org::. Stato di questa Memoria Questa memoria fornisce informazioni per la comunita’ Internet. Non specifica uno standard Internet di alcun genere. La distribuzione di questo documento non e’ soggetta a limitazioni. Nota di Copyright Copyright (C) The Internet Society (2002). All Rights Reserved. Sunto Lo scopo di questo documento e’ rendere disponibile l’algoritmo AES Key Wrap per la comunita’ Internet. Gli Stati Uniti d’America hanno adotatto l’AES (N.d.T. – Advanced Encryption Standard = standard di crittografia avanzata) come nuovo standard di crittografia. L’algoritmo AES Key Wrap sara’ probabilmente adottato dagli USA per la crittografia delle chiavi AES. Gli autori hanno preso maggior parte del testo di questo documento dal draft AES Key Wrap postato dal NIST (N.d.T. – Istituto Nazionale di Standard e Tecnologia). Tavola dei contenuti 1. Introduzione................................................ 2 2. Generalita’................................................. 2 2.1 Notazione e definizioni.................................... 3 2.2 Algoritmi.................................................. 4 2.2.1 Codifica della chiave.................................... 4 2.2.2 Decodifica della chiave.................................. 5 2.2.3 Integrita’ della chiave – il Valore Iniziale............. 6 2.2.3.1 Valore iniziale di default............................. 7 2.2.3.2 Valori iniziali alternativi............................ 7 3. Identificatori di oggetto................................... 8 4. Vettori di prova............................................ 8 4.1 Cifratura di chiavi a 128 bit con KEK a 128 bit............ 8 4.2 Cifratura di chiavi a 128 bit con KEK a 192 bit............ 11 4.3 Cifratura di chiavi a 128 bit con KEK a 256 bit............ 14 4.4 Cifratura di chiavi a 192 bit con KEK a 192 bit............ 17 4.5 Cifratura di chiavi a 192 bit con KEK a 256 bit............ 24 4.6 Cifratura di chiavi a 256 bit con KEK a 256 bit............ 30 Schaad & Housley Informational [Page 1] RFC 3394 AES Key Wrap Algorithm September 2002 5. Considerazioni sulla sicurezza.............................. 39 6. Riferimenti................................................. 39 7. Ringraziamenti.............................................. 39 8. Indirizzi degli autori...................................... 39 9. Riporto integrale del Copyright (in lingua originale)....... 40 1. Introduzione NOTA: La maggior parte del testo che segue e’ preso da [AES-WRAP], e le asserzioni relative alla sicurezza dell’algoritmo AES Key Wrap sono state fatte dal Governo degli USA, non dagli autori di questo documento. Questa specifica e’ progettata per soddisfare la richiesta di cifratura- chiavi dell’Istituto Nazionale di Standards e Tecnologia (NIST), per: disegnare un algoritmo crittografico denominato Key Wrap che utilizzi lo Standard di Crittografia Avanzata (AES) come base per crittografare saldamente chiavi in chiaro con associata qualsiasi informazione e dato, tale per cui la combinazione possa essere piu’ lunga di quella consentita dal blocco AES (128 bit). Ciascun bit cifrato dovrebbe essere estremamente una funzione non-lineare di ciascun bit in chiaro, e (in fase di decifratura) ciascun bit in chiaro dovrebbe estremamente essere una funzione non-lineare di ciascun bit cifrato. E’ sufficiente approssimare un’ideale permutazione pseudocasuale perche’ il verificarsi di fenomeni indesiderabili sia improbabile quanto l’indovinare la chiave AES. Questo algoritmo di cifratura-chiavi necessita di fornire ampia sicurezza per proteggere le chiavi nel contesto dell’architettura, prudentemente disegnata, di gestione delle chiavi stesse. In questo documento ci si riferisce a qualsiasi dato codificato come alla ‘chiave’. L’algoritmo non fa alcuna differenza sul fatto che che i dati codificati siano effetivamente una chiave; vi e’ spesso una buona ragione, infatti, per includere dati aggiuntivi insieme alla chiave, per codificare piu’ chiavi insieme o per codificare dati che non sono strettamente una chiave. Cosi’ il termine ‘chiave’ viene usato nel modo piu’ ampio per indicare qualsiasi dato codificato, in particolar modo delle chiavi, dal momento che questo e’ fondamentalmente un algoritmo finalizzato alla codifica di chiavi. La chiave usata per la codifica viene chiamata chiave di crittografia-chiave (key-encryption key – KEK). In questo documento una KEK puo’ essere qualsiasi chiave valida supportata dal cifrario AES. Per tale motivo, una KEK puo’ essere una chiave a 128,192 o 256 bit. 2. Generalita’ L’algoritmo di cifratura delle chiavi AES e’ disegnato per cifrare o crittografare delle chiavi. La cifratura avviene su blocchi di 64 bit. Prima di essere cifrata, una chiave viene scomposta (per analisi) in n blocchi di 64 bit. Schaad & Housley Informational [Page 2] RFC 3394 AES Key Wrap Algorithm September 2002 L’unica restrizione che l’algoritmo key wrap pone su n e’ che questo sia >=2. (Per le chiavi la cui lunghezza e’ minore o uguale a 64 bits, il campo costante usato in questa specifica e la chiave forma un singolo cifrario di input a 128 bit, rendendo tale codifica non necessaria.) L’algoritmo key wrap accomoda tutte le dimensioni supportate delle chiavi AES. Ad ogni modo, altri valori crittografici hanno spesso la necessita’ di essere cifrati. Un tale valore e’ il seme del numero random generatore del DSS. Tale valore necessita che n sia superiore a 4. Senza dubbio altri valori richiedono questo tipo di protezione. Nessun altro limite superiore viene imposto ad n. L’AES key wrap puo’ essere configurato per utilizzare una qualsiasi dimensione di chiave tra le tre supportate dal cifrario AES. La scelta della dimensione influisce sulla sicurezza generale fornita dalla cifratura, ma non altera la descrizione dell’algoritmo. Per tale motivo nella descrizione che segue, il key wrap viene affrontato in maniera generale; nessuna dimensione di chiave viene specificata per la KEK. 2.1 Notazione e definizioni La notazione che segue viene utilizzata nella descrizione dell’algoritmo di cifratura delle chiavi: AES(K, W) Cifra W usando il cifrario AES con la chiave K AES-1(K, W) Decifra W usando il cifrario AES con la chiave K MSB(j, W) Restituisce i j bit piu’ significativi di W LSB(j, W) Restituisce i j bit meno significativi di W B1 ^ B2 Or esclusivo (XOR) di B1 e B2 B1 | B2 Concatena B1 e B2 K La chiave K di cifratura-della-chiave n Numero di blocchi di 64 bit della chiave s Numero di passi nel processo di cifratura, s = 6n P[i] i (ordinale) blocco in chiaro della chiave C[i] i (ordinale) blocco cifrato della chiave A Registro di controllo integrita' 64 bit R[i] Array di registro a 64-bit in cui i = 0, 1, 2, ..., n A[t], R[i][t] Contenuto dei registri A e R[i] dopo il passo di cifratura t IV Valore iniziale a 64 bit usato durante il processo di cifratura Nell’algoritmo key wrap la funzione di concatenazione viene usata per concatenare quantita’ di 64 bit in modo da formare l’input di 128 bit per il cifrario AES. La funzione di estrazione sara’ usata per suddividere l’output di 128 bit del cifrario AES in due entita’ a 64 bit. Schaad & Housley Informational [Page 3] RFC 3394 AES Key Wrap Algorithm September 2002 2.2 Algoritmi La specifica dell’algoritmo key wrap richiede l’uso del cifrario AES [AES]. Le successive tre sezioni descrivono l’algoritmo di cifratura della chiave, di decifratura della chiave e l’inerente verifica di integrita’ dati. 2.2.1 Cifratura della chiave (key wrap) Gli input per il processo di cifratura sono la KEK e il testo in chiaro che dev’essere cifrato. Il testo in chiaro consiste in n blocchi di 64 bit, contenenti la chiave da cifrare. Di seguito si descrive il processo di cifratura. Inputs (valori in immissione): testo in chiaro n valori a 64-bit {P1, P2, ..., Pn} la chiave K (la KEK) Outputs (valori restituiti): testo cifrato (n+1) valori a 64 bit {C0, C1, ..., Cn} 1) Inizializza le variabili Set A0 to (valore iniziale) (ved. 2.2.3) For i = 1 to n R[0][i] = P[i] 2) Calcola i valori intermedi For t = 1 to s, dove s = 6n A[t] = MSB(64, AES(K, A[t-1] | R[t-1][1])) ^ t For i = 1 to n-1 R[t][i] = R[t-1][i+1] R[t][n] = LSB(64, AES(K, A[t-1] | R[t-1][1])) 3) Ritorna il risultato Set C[0] = A[t] For i = 1 to n C[i] = R[t][i] Una variante dell’algoritmo di cifratura include l’indicizzazione al posto dello spostamento (shifting). Tale approccio consente di calcolare la chiave cifrata sul posto, evitando la rotazione sopra descritta. Questo produce un risultato identico ed e’ piu’ facilmente implementabile nel software. Schaad & Housley Informational [Page 4] RFC 3394 AES Key Wrap Algorithm September 2002 Inputs (valori in immissione): testo in chiaro n valori a 64-bit {P1, P2, ..., Pn} la chiave K (la KEK) Outputs (valori restituiti): testo cifrato (n+1) valori a 64 bit {C0, C1, ..., Cn} 1) Inizializza le variabili Set A = IV, un valore iniziale (ved. 2.2.3) For i = 1 to n R[i] = P[i] 2) Calcola i valori intermedi For j = 0 to 5 For i=1 to n B = AES(K, A | R[i]) A = MSB(64, B) ^ t dove t = (n*j)+i R[i] = LSB(64, B) 3) Ritorna il risultato Set C[0] = A For i = 1 to n C[i] = R[i] 2.2.2 Decifratura della chiave (key unwrap) Gli input per il processo di decifratura sono la KEK e (n+1) blocchi a 64 bit del testo cifrato che consistono nella chiave precedentemente cifrata. L’unwrap ritorna n blocchi di testo in chiaro consistenti in n blocchi a 64 bit della chiave decifrata. Inputs (valori in immissione): testo cifrato (n+1) valori a 64 bit {C0, C1, ..., Cn} la chiave K (la KEK) Outputs (valori restituiti): testo in chiaro n valori a 64-bit {P1, P2, ..., Pn} 1) Inizializza le variabili Set A[s] = C[0] dove s = 6n For i = 1 to n R[s][i] = C[i] 2) Calcola i valori intermedi For t = s to 1 A[t-1] = MSB(64, AES-1(K, ((A[t] ^ t) | R[t][n])) R[t-1][1] = LSB(64, AES-1(K, ((A[t]^t) | R[t][n])) For i = 2 to n R[t-1][i] = R[t][i-1] Schaad & Housley Informational [Page 5] RFC 3394 AES Key Wrap Algorithm September 2002 3) Ritorna il risultato If A[0] e’ un valore iniziale appropriato (ved. 2.2.3), Then For i = 1 to n P[i] = R[0][i] Else Ritorna un errore L’algoritmo di decifratura puo’ inoltre essere specificato come un’operazione basata su indice, consentendo che i calcoli siano effettuati sul posto. Come visto, questo produce lo stesso risultato dell’approccio a rotazione. Inputs (valori in immissione): testo cifrato (n+1) valori a 64 bit {C0, C1, ..., Cn} la chiave K (la KEK) Outputs (valori restituiti): testo in chiaro n valori a 64-bit {P1, P2, ..., Pn} 1) Inizializza le variabili Set A = C[0] For i = 1 to n R[i] = C[i] 2) Calcola i valori intermedi For j = 5 to 0 For i = n to 1 B = AES-1(K, (A ^ t) | R[i]) dove t = n*j+i A = MSB(64, B) R[i] = LSB(64, B) 3) Ritorna il risultato If A e’ un valore iniziale appropriato (ved. 2.2.3), Then For i = 1 to n P[i] = R[i] Else Ritorna un errore 2.2.3 Integrita’ della chiave – il Valore Iniziale Il Valore Iniziale (IV) si riferisce al valore assegnato ad A[0] nel primo passo del processo di cifratura. Questo valore e’ utilizzato per ottenere un controllo di integrita’ della chiave. Nell’ultimo passo del procedimento di decifratura, il valore recuperato di A[0] viene comparato a quello aspettato Schaad & Housley Informational [Page 6] RFC 3394 AES Key Wrap Algorithm September 2002 Di A[0]. Se vi e’ corrispondenza, la chiave viene accettata come valida, e l’algoritmo di decifratura la ritorna. In caso contrario la chiave viene rifiutata e l’algoritmo di decifratura ritorna un errore. L’esatta proprieta’ raggiunta da tale controllo di integrita’ dipende dalla definizione del valore iniziale. Applicazioni differenti potrebbero chiamare per proprieta’ alquanto diverse; per esempio se vi e’ necessita’ di verificare l’integrita’ della chiave durante il suo ciclo vitale, dal principio alla fine, oppure quando e’ stata appena decifrata. Questa specifica definisce un valore iniziale di default che supporta l’integrita’ della chiave durante il periodo che e’ stata cifrata (2.2.3.1). Sono inoltre stati presi provvedimenti per supportare valori iniziali alternativi (2.2.3.2). 2.2.3.1 Valore iniziale di default Il valore iniziale (IV) di default e’ definito per essere una costante esadecimale: A[0] = IV = A6A6A6A6A6A6A6A6 L’uso di una costante come IV supporta un forte controllo di integrita’ della chiave durante il periodo che e’ stata cifrata. Se la decifratura produce A[0] = A6A6A6A6A6A6A6A6, la possibilita’ che la chiave sia corrotta e’ 2^-64. Se la decifratura produce invece un qualsiasi altro valore l’algoritmo deve ritornare un errore e nessuna chiave. 2.2.3.2 Valori iniziali alternativi Quando il key wrap viene usato come parte di un piu’ ampio protocollo o sistema di gestione delle chiavi, la prospettiva di integrita’ dati desiderata potrebbe non limitarsi alle chiavi, o la durata desiderata maggiore rispetto al periodo che la chiave e’ stata cifrata. Inoltre la chiave, se non e’ propriamente una chiave AES, potrebbe non essere un multiplo di 64 bit. Per tali problemi possono essere usate definizioni alternative dei valori iniziali. Il NIST definira’ valori iniziali alternativi nelle future pubblicazioni di gestione delle chiavi, come da necessita’. Per favorire un insieme di valori alternativi che possano evolvere col tempo, le implementazioni key wrap che non sono specifiche d’applicazione richiederanno flessibilita’ in modo che i valori iniziali possano essere impostati e testati. Schaad & Housley Informational [Page 7] RFC 3394 AES Key Wrap Algorithm September 2002 3. Identificatori di oggetto Il NIST ha assegnato i seguenti identificatori di oggetto per identificare l’algoritmo key wrap con il valore iniziale di default specificato nella sezione 2.2.3.1. Viene assegnato un identificatore di oggetto per ciascuna delle dimensioni delle chiavi AES KEK. aes OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) 1 } id-aes128-wrap OBJECT IDENTIFIER ::= { aes 5 } id-aes192-wrap OBJECT IDENTIFIER ::= { aes 25 } id-aes256-wrap OBJECT IDENTIFIER ::= { aes 45 } 4. Vettori di prova Gli esempi in questa sezioni sono generati mediante l’uso dell’implementazione dell’algoritmo key wrap basato sugli indici. 4.1 Cifratura di chiavi a 128 bit con KEK a 128 bit Valori in immissione: KEK: 000102030405060708090A0B0C0D0E0F Chiave da cifrare: 00112233445566778899AABBCCDDEEFF Cifratura (wrap): Passo t A R1 R2 1 In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Enc F4740052E82A2251 74CE86FBD7B805E7 8899AABBCCDDEEFF XorT F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF 2 In F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF Enc 06BA4EBDE7768D0B 74CE86FBD7B805E7 D132EE38147E76F8 XorT 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8 3 In 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8 Enc FC967627BE937208 FE6E8D679C5D3460 D132EE38147E76F8 XorT FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8 Schaad & Housley Informational [Page 8] RFC 3394 AES Key Wrap Algorithm September 2002 4 In FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8 Enc 5896EA9028EE203B FE6E8D679C5D3460 07B2BD973E36A6FC XorT 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC 5 In 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC Enc 93AEA71B258D90C3 25F5A3ADC2195401 07B2BD973E36A6FC XorT 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC 6 In 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC Enc E3EE986344D878F7 25F5A3ADC2195401 F14863BB1E9CA90A XorT E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A 7 In E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A Enc 2BFC21B2C20E4006 B556D35ED8CEF052 F14863BB1E9CA90A XorT 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A 8 In 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A Enc 4BE8CE99C0A43A7D B556D35ED8CEF052 64BAE5818D0570BB XorT 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB 9 In 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB Enc EBE1CE91067024F3 BE114B343EB00981 64BAE5818D0570BB XorT EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB 10 In EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB Enc 5A9C7B1F5B1C3B46 BE114B343EB00981 4FD3D2B7D74FBB42 XorT 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42 11 In 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42 Enc 93B71967EED41FFC AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 XorT 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 12 In 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 Enc 1FA68B0A8112B44B AEF34BD8FB5A7B82 9D3E862371D2CFE5 XorT 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5 Valore tornato: Testo cifrato: 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5 Schaad & Housley Informational [Page 9] RFC 3394 AES Key Wrap Algorithm September 2002 Decifratura (unwrap): Passo t A R1 R2 12 In 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5 XorT 1FA68B0A8112B44B AEF34BD8FB5A7B82 9D3E862371D2CFE5 Dec 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 11 In 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 XorT 93B71967EED41FFC AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 Dec 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42 10 In 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42 XorT 5A9C7B1F5B1C3B46 BE114B343EB00981 4FD3D2B7D74FBB42 Dec EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB 9 In EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB XorT EBE1CE91067024F3 BE114B343EB00981 64BAE5818D0570BB Dec 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB 8 In 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB XorT 4BE8CE99C0A43A7D B556D35ED8CEF052 64BAE5818D0570BB Dec 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A 7 In 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A XorT 2BFC21B2C20E4006 B556D35ED8CEF052 F14863BB1E9CA90A Dec E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A 6 In E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A XorT E3EE986344D878F7 25F5A3ADC2195401 F14863BB1E9CA90A Dec 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC 5 In 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC XorT 93AEA71B258D90C3 25F5A3ADC2195401 07B2BD973E36A6FC Dec 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC 4 In 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC XorT 5896EA9028EE203B FE6E8D679C5D3460 07B2BD973E36A6FC Dec FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8 Schaad & Housley Informational [Page 10] RFC 3394 AES Key Wrap Algorithm September 2002 3 In FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8 XorT FC967627BE937208 FE6E8D679C5D3460 D132EE38147E76F8 Dec 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8 2 In 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8 XorT 06BA4EBDE7768D0B 74CE86FBD7B805E7 D132EE38147E76F8 Dec F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF 1 In F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF XorT F4740052E82A2251 74CE86FBD7B805E7 8899AABBCCDDEEFF Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Testo in chiaro A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Valore tornato: Chiave: 00112233445566778899AABBCCDDEEFF 4.2 Cifratura di chiavi a 128 bit con KEK a 192 bit Valori in immissione: KEK: 000102030405060708090A0B0C0D0E0F1011121314151617 Chiave: 00112233445566778899AABBCCDDEEFF Cifratura: Passo t A R1 R21 In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Enc DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF XorT DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF 2 In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF Enc 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D XorT 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D 3 In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D Enc 7B8E343CA51CF8AB BC164F51E20CC983 51F22F3286758A2D XorT 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D 4 In 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D Enc 02A97C5897140595 BC164F51E20CC983 05FC2D8F8FF4B919 XorT 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919 Schaad & Housley Informational [Page 11] RFC 3394 AES Key Wrap Algorithm September 2002 5 In 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919 Enc 15D4B63F66583817 429487269D3A0016 05FC2D8F8FF4B919 XorT 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919 6 In 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919 Enc AE2D0B76A6951EEA 429487269D3A0016 05A2D8FB4DD5BD7A XorT AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A 7 In AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A Enc 79F849444F4B8AA8 D40B091CDBAC0340 05A2D8FB4DD5BD7A XorT 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A 8 In 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A Enc 5933A9195B5F5E21 D40B091CDBAC0340 89F0D6C06F8CA9B4 XorT 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4 9 In 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4 Enc 57ADA800299C2E85 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4 XorT 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4 10 In 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4 Enc BF17BD6A9BC80163 4D5B3DFE7C04ABBA EB24CCFA52EA9078 XorT BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078 11 In BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078 Enc B68BF270AE81544F F92B5B97C050AED2 EB24CCFA52EA9078 XorT B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078 12 In B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078 Enc 96778B25AE6CA439 F92B5B97C050AED2 468AB8A17AD84E5D XorT 96778B25AE6CA435 F92B5B97C050AED2 468AB8A17AD84E5D Valore tornato: Testo cifrato: 96778B25AE6CA435 F92B5B97C050AED2 468AB8A17AD84E5D Schaad & Housley Informational [Page 12] RFC 3394 AES Key Wrap Algorithm September 2002 Decifratura: Passo t A R1 R2 12 In 96778B25AE6CA435 F92B5B97C050AED2 468AB8A17AD84E5D XorT 96778B25AE6CA439 F92B5B97C050AED2 468AB8A17AD84E5D Dec B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078 11 In B68BF270AE815444 F92B5B97C050AED2 EB24CCFA52EA9078 XorT B68BF270AE81544F F92B5B97C050AED2 EB24CCFA52EA9078 Dec BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078 10 In BF17BD6A9BC80169 4D5B3DFE7C04ABBA EB24CCFA52EA9078 XorT BF17BD6A9BC80163 4D5B3DFE7C04ABBA EB24CCFA52EA9078 Dec 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4 9 In 57ADA800299C2E8C 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4 XorT 57ADA800299C2E85 4D5B3DFE7C04ABBA 89F0D6C06F8CA9B4 Dec 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4 8 In 5933A9195B5F5E29 D40B091CDBAC0340 89F0D6C06F8CA9B4 XorT 5933A9195B5F5E21 D40B091CDBAC0340 89F0D6C06F8CA9B4 Dec 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A 7 In 79F849444F4B8AAF D40B091CDBAC0340 05A2D8FB4DD5BD7A XorT 79F849444F4B8AA8 D40B091CDBAC0340 05A2D8FB4DD5BD7A Dec AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A 6 In AE2D0B76A6951EEC 429487269D3A0016 05A2D8FB4DD5BD7A XorT AE2D0B76A6951EEA 429487269D3A0016 05A2D8FB4DD5BD7A Dec 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919 5 In 15D4B63F66583812 429487269D3A0016 05FC2D8F8FF4B919 XorT 15D4B63F66583817 429487269D3A0016 05FC2D8F8FF4B919 Dec 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919 4 In 02A97C5897140591 BC164F51E20CC983 05FC2D8F8FF4B919 XorT 02A97C5897140595 BC164F51E20CC983 05FC2D8F8FF4B919 Dec 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D Schaad & Housley Informational [Page 13] RFC 3394 AES Key Wrap Algorithm September 2002 3 In 7B8E343CA51CF8A8 BC164F51E20CC983 51F22F3286758A2D XorT 7B8E343CA51CF8AB BC164F51E20CC983 51F22F3286758A2D Dec 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D 2 In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D XorT 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D Dec DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF 1 In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF XorT DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Testo in chiaro A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Valore tornato: Chiave: 00112233445566778899AABBCCDDEEFF 4.3 Cifratura di chiavi a 128 bit con KEK a 256 bit Valori in immissione: KEK: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F Chiave: 00112233445566778899AABBCCDDEEFF Cifratura: Passo t A R1 R2 1 In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Enc 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF XorT 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 2 In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF Enc D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8 XorT D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 3 In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 Enc 85DBDF1879D5C0A5 5602001BFA07AD8B F60E0CDB7F429FE8 XorT 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8 Schaad & Housley Informational [Page 14] RFC 3394 AES Key Wrap Algorithm September 2002 4 In 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8 Enc 738C291128B7226D 5602001BFA07AD8B 58924F777C3F678C XorT 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C 5 In 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C Enc 2656A02DFFF054DC F4DF378183E3D5B2 58924F777C3F678C XorT 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C 6 In 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C Enc DDFD0C0E8B52A63A F4DF378183E3D5B2 91AC1D36A964F41B XorT DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B 7 In DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B Enc 39AB00D4AE4399EA 5271D5CED80F34ED 91AC1D36A964F41B XorT 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B 8 In 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B Enc 4CE414878463EAAC 5271D5CED80F34ED 67D8ED899E7929B8 XorT 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8 9 In 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8 Enc FBB44DB106AA0789 0DF7E50829123648 67D8ED899E7929B8 XorT FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8 10 In FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8 Enc 877112A7308ADCC5 0DF7E50829123648 3472D5993D318FD2 XorT 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2 11 In 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2 Enc 78E40190807CC151 63E9777905818A2A 3472D5993D318FD2 XorT 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2 12 In 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2 Enc 64E8C3F9CE0F5BAE 63E9777905818A2A 93C8191E7D6E8AE7 XorT 64E8C3F9CE0F5BA2 63E9777905818A2A 93C8191E7D6E8AE7 Valore tornato: Testo cifrato: 64E8C3F9CE0F5BA2 63E9777905818A2A 93C8191E7D6E8AE7 Schaad & Housley Informational [Page 15] RFC 3394 AES Key Wrap Algorithm September 2002 Decifratura: Passo t A R1 R2 12 In 64E8C3F9CE0F5BA2 63E9777905818A2A 93C8191E7D6E8AE7 XorT 64E8C3F9CE0F5BAE 63E9777905818A2A 93C8191E7D6E8AE7 Dec 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2 11 In 78E40190807CC15A 63E9777905818A2A 3472D5993D318FD2 XorT 78E40190807CC151 63E9777905818A2A 3472D5993D318FD2 Dec 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2 10 In 877112A7308ADCCF 0DF7E50829123648 3472D5993D318FD2 XorT 877112A7308ADCC5 0DF7E50829123648 3472D5993D318FD2 Dec FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8 9 In FBB44DB106AA0780 0DF7E50829123648 67D8ED899E7929B8 XorT FBB44DB106AA0789 0DF7E50829123648 67D8ED899E7929B8 Dec 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8 8 In 4CE414878463EAA4 5271D5CED80F34ED 67D8ED899E7929B8 XorT 4CE414878463EAAC 5271D5CED80F34ED 67D8ED899E7929B8 Dec 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B 7 In 39AB00D4AE4399ED 5271D5CED80F34ED 91AC1D36A964F41B XorT 39AB00D4AE4399EA 5271D5CED80F34ED 91AC1D36A964F41B Dec DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B 6 In DDFD0C0E8B52A63C F4DF378183E3D5B2 91AC1D36A964F41B XorT DDFD0C0E8B52A63A F4DF378183E3D5B2 91AC1D36A964F41B Dec 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C 5 In 2656A02DFFF054D9 F4DF378183E3D5B2 58924F777C3F678C XorT 2656A02DFFF054DC F4DF378183E3D5B2 58924F777C3F678C Dec 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C 4 In 738C291128B72269 5602001BFA07AD8B 58924F777C3F678C XorT 738C291128B7226D 5602001BFA07AD8B 58924F777C3F678C Dec 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8 Schaad & Housley Informational [Page 16] RFC 3394 AES Key Wrap Algorithm September 2002 3 In 85DBDF1879D5C0A6 5602001BFA07AD8B F60E0CDB7F429FE8 XorT 85DBDF1879D5C0A5 5602001BFA07AD8B F60E0CDB7F429FE8 Dec D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 2 In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 XorT D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8 Dec 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 1 In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF XorT 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Testo in chiaro A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF Valore tornato: Chiave: 00112233445566778899AABBCCDDEEFF 4.4 Cifratura di chiavi a 192 bit con KEK a 192 bit Valori in immissione: KEK: 000102030405060708090A0B0C0D0E0F1011121314151617 Chiave: 00112233445566778899AABBCCDDEEFF0001020304050607 Cifratura: Passo t A/R3 R1 R2 1 In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 Enc DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF 0001020304050607 XorT DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF 0001020304050607 2 In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF 0001020304050607 Enc 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D 0001020304050607 XorT 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D 0001020304050607 Schaad & Housley Informational [Page 17] RFC 3394 AES Key Wrap Algorithm September 2002 3 In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D 0001020304050607 Enc 2C8E19A519025B7C 351D385096CCFB29 51F22F3286758A2D FF540E514DE120A3 XorT 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D FF540E514DE120A3 4 In 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D FF540E514DE120A3 Enc E727C7BDF822602E A08DAA041D17BBBA 51F22F3286758A2D FF540E514DE120A3 XorT E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D FF540E514DE120A3 5 In E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D FF540E514DE120A3 Enc 15B61F7B25D51700 A08DAA041D17BBBA AE82BC1118A5DEA4 FF540E514DE120A3 XorT 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4 FF540E514DE120A3 6 In 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4 FF540E514DE120A3 Enc A187755AEA64719C A08DAA041D17BBBA AE82BC1118A5DEA4 D1E708FD13778787 XorT A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4 D1E708FD13778787 7 In A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4 D1E708FD13778787 Enc 5A994895D81644B7 926ED65A9E853FD9 AE82BC1118A5DEA4 D1E708FD13778787 XorT 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4 D1E708FD13778787 8 In 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4 D1E708FD13778787 Enc 864F408C8AB8CDCF 926ED65A9E853FD9 552A09E141D08AE3 D1E708FD13778787 XorT 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3 D1E708FD13778787 Schaad & Housley Informational [Page 18] RFC 3394 AES Key Wrap Algorithm September 2002 9 In 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3 D1E708FD13778787 Enc 53F4373F575EB7A4 926ED65A9E853FD9 552A09E141D08AE3 ED5E8456E61BD295 XorT 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3 ED5E8456E61BD295 10 In 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3 ED5E8456E61BD295 Enc 9EAA4CDA0B1BA5FF 98883EDC6B080FB5 552A09E141D08AE3 ED5E8456E61BD295 XorT 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3 ED5E8456E61BD295 11 In 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3 ED5E8456E61BD295 Enc B1B9902C68E0EB52 98883EDC6B080FB5 63F6D88A0663FEF9 ED5E8456E61BD295 XorT B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9 ED5E8456E61BD295 12 In B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9 ED5E8456E61BD295 Enc FCE591D77709A6E0 98883EDC6B080FB5 63F6D88A0663FEF9 463437433A93EFE5 XorT FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9 463437433A93EFE5 13 In FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9 463437433A93EFE5 Enc 428428D2BD88CF58 C46965F34EFB2261 63F6D88A0663FEF9 463437433A93EFE5 XorT 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9 463437433A93EFE5 14 In 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9 463437433A93EFE5 Enc 6AC861AB961DA578 C46965F34EFB2261 56E3CEE892BBEFC4 463437433A93EFE5 XorT 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4 463437433A93EFE5 Schaad & Housley Informational [Page 19] RFC 3394 AES Key Wrap Algorithm September 2002 15 In 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4 463437433A93EFE5 Enc E80DB49CC9A1EA61 C46965F34EFB2261 56E3CEE892BBEFC4 84943C8C67FCFD53 XorT E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4 84943C8C67FCFD53 16 In E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4 84943C8C67FCFD53 Enc ABEE3534AC465C2C 68F24EC260743EDC 56E3CEE892BBEFC4 84943C8C67FCFD53 XorT ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4 84943C8C67FCFD53 17 In ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4 84943C8C67FCFD53 Enc E7CC8D8CEDE62BF7 68F24EC260743EDC E1C6C7DDEE725A93 84943C8C67FCFD53 XorT E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 84943C8C67FCFD53 18 In E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 84943C8C67FCFD53 Enc 031D33264E15D320 68F24EC260743EDC E1C6C7DDEE725A93 6BA814915C6762D2 XorT 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93 6BA814915C6762D2 Valore tornato: Testo cifrato: 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93 6BA814915C6762D2 Decifratura: Passp t A/R3 R1 R2 18 In 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93 6BA814915C6762D2 XorT 031D33264E15D320 68F24EC260743EDC E1C6C7DDEE725A93 6BA814915C6762D2 Dec E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 84943C8C67FCFD53 Schaad & Housley Informational [Page 20] RFC 3394 AES Key Wrap Algorithm September 2002 17 In E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 84943C8C67FCFD53 XorT E7CC8D8CEDE62BF7 68F24EC260743EDC E1C6C7DDEE725A93 84943C8C67FCFD53 Dec ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4 84943C8C67FCFD53 16 In ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4 84943C8C67FCFD53 XorT ABEE3534AC465C2C 68F24EC260743EDC 56E3CEE892BBEFC4 84943C8C67FCFD53 Dec E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4 84943C8C67FCFD53 15 In E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4 84943C8C67FCFD53 XorT E80DB49CC9A1EA61 C46965F34EFB2261 56E3CEE892BBEFC4 84943C8C67FCFD53 Dec 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4 463437433A93EFE5 14 In 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4 463437433A93EFE5 XorT 6AC861AB961DA578 C46965F34EFB2261 56E3CEE892BBEFC4 463437433A93EFE5 Dec 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9 463437433A93EFE5 13 In 428428D2BD88CF55 C46965F34EFB2261 63F6D88A0663FEF9 463437433A93EFE5 XorT 428428D2BD88CF58 C46965F34EFB2261 63F6D88A0663FEF9 463437433A93EFE5 Dec FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9 463437433A93EFE5 12 In FCE591D77709A6EC 98883EDC6B080FB5 63F6D88A0663FEF9 463437433A93EFE5 XorT FCE591D77709A6E0 98883EDC6B080FB5 63F6D88A0663FEF9 463437433A93EFE5 Dec B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9 ED5E8456E61BD295 Schaad & Housley Informational [Page 21] RFC 3394 AES Key Wrap Algorithm September 2002 11 In B1B9902C68E0EB59 98883EDC6B080FB5 63F6D88A0663FEF9 ED5E8456E61BD295 XorT B1B9902C68E0EB52 98883EDC6B080FB5 63F6D88A0663FEF9 ED5E8456E61BD295 Dec 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3 ED5E8456E61BD295 10 In 9EAA4CDA0B1BA5F5 98883EDC6B080FB5 552A09E141D08AE3 ED5E8456E61BD295 XorT 9EAA4CDA0B1BA5FF 98883EDC6B080FB5 552A09E141D08AE3 ED5E8456E61BD295 Dec 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3 ED5E8456E61BD295 9 In 53F4373F575EB7AD 926ED65A9E853FD9 552A09E141D08AE3 ED5E8456E61BD295 XorT 53F4373F575EB7A4 926ED65A9E853FD9 552A09E141D08AE3 ED5E8456E61BD295 Dec 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3 D1E708FD13778787 8 In 864F408C8AB8CDC7 926ED65A9E853FD9 552A09E141D08AE3 D1E708FD13778787 XorT 864F408C8AB8CDCF 926ED65A9E853FD9 552A09E141D08AE3 D1E708FD13778787 Dec 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4 D1E708FD13778787 7 In 5A994895D81644B0 926ED65A9E853FD9 AE82BC1118A5DEA4 D1E708FD13778787 XorT 5A994895D81644B7 926ED65A9E853FD9 AE82BC1118A5DEA4 D1E708FD13778787 Dec A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4 D1E708FD13778787 6 In A187755AEA64719A A08DAA041D17BBBA AE82BC1118A5DEA4 D1E708FD13778787 XorT A187755AEA64719C A08DAA041D17BBBA AE82BC1118A5DEA4 D1E708FD13778787 Dec 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4 FF540E514DE120A3 Schaad & Housley Informational [Page 22] RFC 3394 AES Key Wrap Algorithm September 2002 5 In 15B61F7B25D51705 A08DAA041D17BBBA AE82BC1118A5DEA4 FF540E514DE120A3 XorT 15B61F7B25D51700 A08DAA041D17BBBA AE82BC1118A5DEA4 FF540E514DE120A3 Dec E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D FF540E514DE120A3 4 In E727C7BDF822602A A08DAA041D17BBBA 51F22F3286758A2D FF540E514DE120A3 XorT E727C7BDF822602E A08DAA041D17BBBA 51F22F3286758A2D FF540E514DE120A3 Dec 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D FF540E514DE120A3 3 In 2C8E19A519025B7F 351D385096CCFB29 51F22F3286758A2D FF540E514DE120A3 XorT 2C8E19A519025B7C 351D385096CCFB29 51F22F3286758A2D FF540E514DE120A3 Dec 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D 0001020304050607 2 In 9D9B32B9ED742E00 351D385096CCFB29 51F22F3286758A2D 0001020304050607 XorT 9D9B32B9ED742E02 351D385096CCFB29 51F22F3286758A2D 0001020304050607 Dec DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF 0001020304050607 1 In DFE8FD5D1A3786A6 351D385096CCFB29 8899AABBCCDDEEFF 0001020304050607 XorT DFE8FD5D1A3786A7 351D385096CCFB29 8899AABBCCDDEEFF 0001020304050607 Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 Testo in chiaro: A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 Valore tornato: Chiave: 00112233445566778899AABBCCDDEEFF0001020304050607 Schaad & Housley Informational [Page 23] RFC 3394 AES Key Wrap Algorithm September 2002 4.5 Cifratura di chiavi a 192 bit con KEK a 256 bit Valori in immissione: KEK: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F Chiave: 00112233445566778899AABBCCDDEEFF0001020304050607 Cifratura: Passo t A/R3 R1 R2 1 In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 Enc 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 XorT 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 2 In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 Enc D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 XorT D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 3 In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 Enc 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 XorT 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 4 In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 Enc F1D28EA6295891EC 0CC86A4D9B9C6A31 F60E0CDB7F429FE8 6CA405593A3B5154 XorT F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8 6CA405593A3B5154 Schaad & Housley Informational [Page 24] RFC 3394 AES Key Wrap Algorithm September 2002 5 In F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8 6CA405593A3B5154 Enc BF213BFD04E8A24F 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 6CA405593A3B5154 XorT BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 6CA405593A3B5154 6 In BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 6CA405593A3B5154 Enc 6F85BFBDB7E880E3 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 39EBC1A1A53FF55B XorT 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 39EBC1A1A53FF55B 7 In 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 39EBC1A1A53FF55B Enc D532789E4E79D819 444F92BF78E77BB1 AEBE2D5C8BF747A9 39EBC1A1A53FF55B XorT D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9 39EBC1A1A53FF55B 8 In D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9 39EBC1A1A53FF55B Enc 2A5FFCEF1F1916D8 444F92BF78E77BB1 C6874607903270CD 39EBC1A1A53FF55B XorT 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD 39EBC1A1A53FF55B 9 In 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD 39EBC1A1A53FF55B Enc 01271BA91D9804F6 444F92BF78E77BB1 C6874607903270CD 740A273461ED82C6 XorT 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD 740A273461ED82C6 10 In 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD 740A273461ED82C6 Enc A3223BD7237F7033 FB1611A83BEB567F C6874607903270CD 740A273461ED82C6 XorT A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD 740A273461ED82C6 Schaad & Housley Informational [Page 25] RFC 3394 AES Key Wrap Algorithm September 2002 11 In A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD 740A273461ED82C6 Enc B50C330616E7B1C7 FB1611A83BEB567F 73EDC8CB9322C34E 740A273461ED82C6 XorT B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E 740A273461ED82C6 12 In B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E 740A273461ED82C6 Enc FB8AFF3F083E12CE FB1611A83BEB567F 73EDC8CB9322C34E 0B08CFDF48020F0D XorT FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E 0B08CFDF48020F0D 13 In FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E 0B08CFDF48020F0D Enc 82F597607784A33C FB1F2965FCE1E783 73EDC8CB9322C34E 0B08CFDF48020F0D XorT 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E 0B08CFDF48020F0D 14 In 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E 0B08CFDF48020F0D Enc D48E5E83B7C906DB FB1F2965FCE1E783 D36F4FFBA2C82ED9 0B08CFDF48020F0D XorT D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9 0B08CFDF48020F0D 15 In D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9 0B08CFDF48020F0D Enc 1BF2B1CD947311B6 FB1F2965FCE1E783 D36F4FFBA2C82ED9 C490C33642717146 XorT 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9 C490C33642717146 16 In 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9 C490C33642717146 Enc C9F5F26A378011DE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 C490C33642717146 XorT C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 C490C33642717146 Schaad & Housley Informational [Page 26] RFC 3394 AES Key Wrap Algorithm September 2002 17 In C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 C490C33642717146 Enc 39128CE5E435F3A0 F6E6F4FBE30E71E4 769C8B80A32CB895 C490C33642717146 XorT 39128CE5E4325F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895 C490C33642717146 18 In 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895 C490C33642717146 Enc A8F9BC1612C68B2D F6E6F4FBE30E71E4 769C8B80A32CB895 8CD5D17D6B254DA1 XorT A8F9BC1612C68B3F F6E6F4FBE30E71E4 769C8B80A32CB895 8CD5D17D6B254DA1 Testo cifrato: A8F9BC1612C68B3F F6E6F4FBE30E71E4 769C8B80A32CB895 8CD5D17D6B254DA1 Decifratura: Passp t A/R3 R1 R2 18 In A8F9BC1612C68B3F F6E6F4FBE30E71E4 769C8B80A32CB895 8CD5D17D6B254DA1 XorT A8F9BC1612C68B2D F6E6F4FBE30E71E4 769C8B80A32CB895 8CD5D17D6B254DA1 Dec 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895 C490C33642717146 17 In 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895 C490C33642717146 XorT 39128CE5E435F3A0 F6E6F4FBE30E71E4 769C8B80A32CB895 C490C33642717146 Dec C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 C490C33642717146 16 In C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 C490C33642717146 XorT C9F5F26A378011DE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 C490C33642717146 Dec 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9 C490C33642717146 Schaad & Housley Informational [Page 27] RFC 3394 AES Key Wrap Algorithm September 2002 15 In 1BF2B1CD947311B9 FB1F2965FCE1E783 D36F4FFBA2C82ED9 C490C33642717146 XorT 1BF2B1CD947311B6 FB1F2965FCE1E783 D36F4FFBA2C82ED9 C490C33642717146 Dec D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9 0B08CFDF48020F0D 14 In D48E5E83B7C906D5 FB1F2965FCE1E783 D36F4FFBA2C82ED9 0B08CFDF48020F0D XorT D48E5E83B7C906DB FB1F2965FCE1E783 D36F4FFBA2C82ED9 0B08CFDF48020F0D Dec 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E 0B08CFDF48020F0D 13 In 82F597607784A331 FB1F2965FCE1E783 73EDC8CB9322C34E 0B08CFDF48020F0D XorT 82F597607784A33C FB1F2965FCE1E783 73EDC8CB9322C34E 0B08CFDF48020F0D Dec FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E 0B08CFDF48020F0D 12 In FB8AFF3F083E12C2 FB1611A83BEB567F 73EDC8CB9322C34E 0B08CFDF48020F0D XorT FB8AFF3F083E12CE FB1611A83BEB567F 73EDC8CB9322C34E 0B08CFDF48020F0D Dec B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E 740A273461ED82C6 11 In B50C330616E7B1CC FB1611A83BEB567F 73EDC8CB9322C34E 740A273461ED82C6 XorT B50C330616E7B1C7 FB1611A83BEB567F 73EDC8CB9322C34E 740A273461ED82C6 Dec A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD 740A273461ED82C6 10 In A3223BD7237F7039 FB1611A83BEB567F C6874607903270CD 740A273461ED82C6 XorT A3223BD7237F7033 FB1611A83BEB567F C6874607903270CD 740A273461ED82C6 Dec 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD 740A273461ED82C6 Schaad & Housley Informational [Page 28] RFC 3394 AES Key Wrap Algorithm September 2002 9 In 01271BA91D9804FF 444F92BF78E77BB1 C6874607903270CD 740A273461ED82C6 XorT 01271BA91D9804F6 444F92BF78E77BB1 C6874607903270CD 740A273461ED82C6 Dec 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD 39EBC1A1A53FF55B 8 In 2A5FFCEF1F1916D0 444F92BF78E77BB1 C6874607903270CD 39EBC1A1A53FF55B XorT 2A5FFCEF1F1916D8 444F92BF78E77BB1 C6874607903270CD 39EBC1A1A53FF55B Dec D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9 39EBC1A1A53FF55B 7 In D532789E4E79D81E 444F92BF78E77BB1 AEBE2D5C8BF747A9 39EBC1A1A53FF55B XorT D532789E4E79D819 444F92BF78E77BB1 AEBE2D5C8BF747A9 39EBC1A1A53FF55B Dec 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 39EBC1A1A53FF55B 6 In 6F85BFBDB7E880E5 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 39EBC1A1A53FF55B XorT 6F85BFBDB7E880E3 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 39EBC1A1A53FF55B Dec BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 6CA405593A3B5154 5 In BF213BFD04E8A24A 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 6CA405593A3B5154 XorT BF213BFD04E8A24F 0CC86A4D9B9C6A31 AEBE2D5C8BF747A9 6CA405593A3B5154 Dec F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8 6CA405593A3B5154 4 In F1D28EA6295891E8 0CC86A4D9B9C6A31 F60E0CDB7F429FE8 6CA405593A3B5154 XorT F1D28EA6295891EC 0CC86A4D9B9C6A31 F60E0CDB7F429FE8 6CA405593A3B5154 Dec 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 Schaad & Housley Informational [Page 29] RFC 3394 AES Key Wrap Algorithm September 2002 3 In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 XorT 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 Dec D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 2 In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 XorT D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 Dec 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 1 In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 XorT 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 Testo in chiaro: A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 Valore tornato: Chiave: 00112233445566778899AABBCCDDEEFF0001020304050607 4.6 Cifratura di chiavi a 256 bit con KEK a 256 bit Valori in immissione: KEK: 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F Chiave: 00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F Schaad & Housley Informational [Page 30] RFC 3394 AES Key Wrap Algorithm September 2002 Cifratura: Passo t A/R3 R1/R4 R2 1 In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F Enc 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F XorT 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F 2 In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F Enc D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 08090A0B0C0D0E0F XorT D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 08090A0B0C0D0E0F 3 In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 08090A0B0C0D0E0F Enc 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 08090A0B0C0D0E0F XorT 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 08090A0B0C0D0E0F 4 In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 08090A0B0C0D0E0F Enc 564408FDD0DD2EA4 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC XorT 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC 5 In 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC Enc 4EF02EDD3146AFBB E7D1194D853E53F8 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC XorT 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC Schaad & Housley Informational [Page 31] RFC 3394 AES Key Wrap Algorithm September 2002 6 In 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC Enc 963AAFFD96B223EC E7D1194D853E53F8 EFD48BA304945576 6CA405593A3B5154 E5923CB9FDB56FBC XorT 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576 6CA405593A3B5154 E5923CB9FDB56FBC 7 In 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576 6CA405593A3B5154 E5923CB9FDB56FBC Enc 66D7A8ADD086B9DD E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 E5923CB9FDB56FBC XorT 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 E5923CB9FDB56FBC 8 In 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 E5923CB9FDB56FBC Enc C58B9D3AC6D5B94E E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 XorT C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 9 In C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 Enc 1A681354E84C41F8 D6AE29ECE7192D43 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 XorT 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 10 In 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 Enc DBA417FB51F9E3CB D6AE29ECE7192D43 FBEC169FA5C0F6BA C365B66943E2D760 73E3B6CBE5D05D74 XorT DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA C365B66943E2D760 73E3B6CBE5D05D74 11 In DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA C365B66943E2D760 73E3B6CBE5D05D74 Enc 0629EB29A42E4FD9 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 73E3B6CBE5D05D74 XorT 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 73E3B6CBE5D05D74 Schaad & Housley Informational [Page 32] RFC 3394 AES Key Wrap Algorithm September 2002 12 In 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 73E3B6CBE5D05D74 Enc F9ED8A1429515665 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 XorT F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 13 In F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 Enc 2E8E2B6BB2016696 4745856AF333F01F FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 XorT 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 14 In 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 Enc 15342443CB95ADB1 4745856AF333F01F BCA418BBF7DCE60B F56701DAF0388216 3CF149E90E8C04D9 XorT 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B F56701DAF0388216 3CF149E90E8C04D9 15 In 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B F56701DAF0388216 3CF149E90E8C04D9 Enc 33FE29365885C4B7 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 3CF149E90E8C04D9 XorT 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 3CF149E90E8C04D9 16 In 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 3CF149E90E8C04D9 Enc 5075496800978B4A 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C XorT 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C 17 In 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C Enc A5382A26B47551F1 1BB8C765A84195E7 BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C XorT A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C Schaad & Housley Informational [Page 33] RFC 3394 AES Key Wrap Algorithm September 2002 18 In A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C Enc F19D80D437EFE8F9 1BB8C765A84195E7 F7EDAD518C960D36 C272E9466AAE98F9 40F68C91DB49702C XorT F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36 C272E9466AAE98F9 40F68C91DB49702C 19 In F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36 C272E9466AAE98F9 40F68C91DB49702C Enc B422B444B87A190B 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 40F68C91DB49702C XorT B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 40F68C91DB49702C 20 In B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 40F68C91DB49702C Enc D058823360F88A37 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 XorT D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 21 In D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 Enc C89A96CA7B163ECC CBCCB35CFB87F826 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 XorT C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 22 In C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 Enc 39D02FE7435870ED CBCCB35CFB87F826 3F5786E2D80ED326 1CFBF6B4C24CB982 07DFE775B9687E73 XorT 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326 1CFBF6B4C24CB982 07DFE775B9687E73 23 In 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326 1CFBF6B4C24CB982 07DFE775B9687E73 Enc 0AEB82AE3146A91B CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B 07DFE775B9687E73 XorT 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B 07DFE775B9687E73 Schaad & Housley Informational [Page 34] RFC 3394 AES Key Wrap Algorithm September 2002 24 In 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B 07DFE775B9687E73 Enc 28C9F404C4B810EC CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B FB988B9B7A02DD21 XorT 28C9F404C4B810F4 CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B FB988B9B7A02DD21 Valore tornato: Testo cifrato: 28C9F404C4B810F4 CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B FB988B9B7A02DD21 Decifratura: Passo t A/R3 R1/R4 R2 24 In 28C9F404C4B810F4 CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B FB988B9B7A02DD21 XorT 28C9F404C4B810EC CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B FB988B9B7A02DD21 Dec 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B 07DFE775B9687E73 23 In 0AEB82AE3146A90C CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B 07DFE775B9687E73 XorT 0AEB82AE3146A91B CBCCB35CFB87F826 3F5786E2D80ED326 CBC7F0E71A99F43B 07DFE775B9687E73 Dec 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326 1CFBF6B4C24CB982 07DFE775B9687E73 22 In 39D02FE7435870FB CBCCB35CFB87F826 3F5786E2D80ED326 1CFBF6B4C24CB982 07DFE775B9687E73 XorT 39D02FE7435870ED CBCCB35CFB87F826 3F5786E2D80ED326 1CFBF6B4C24CB982 07DFE775B9687E73 Dec C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 21 In C89A96CA7B163ED9 CBCCB35CFB87F826 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 XorT C89A96CA7B163ECC CBCCB35CFB87F826 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 Dec D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 Schaad & Housley Informational [Page 35] RFC 3394 AES Key Wrap Algorithm September 2002 20 In D058823360F88A23 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 XorT D058823360F88A37 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 07DFE775B9687E73 Dec B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 40F68C91DB49702C 19 In B422B444B87A1918 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 40F68C91DB49702C XorT B422B444B87A190B 1BB8C765A84195E7 F7EDAD518C960D36 1CFBF6B4C24CB982 40F68C91DB49702C Dec F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36 C272E9466AAE98F9 40F68C91DB49702C 18 In F19D80D437EFE8EB 1BB8C765A84195E7 F7EDAD518C960D36 C272E9466AAE98F9 40F68C91DB49702C XorT F19D80D437EFE8F9 1BB8C765A84195E7 F7EDAD518C960D36 C272E9466AAE98F9 40F68C91DB49702C Dec A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C 17 In A5382A26B47551E0 1BB8C765A84195E7 BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C XorT A5382A26B47551F1 1BB8C765A84195E7 BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C Dec 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C 16 In 5075496800978B5A 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C XorT 5075496800978B4A 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 40F68C91DB49702C Dec 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 3CF149E90E8C04D9 15 In 33FE29365885C4B8 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 3CF149E90E8C04D9 XorT 33FE29365885C4B7 4745856AF333F01F BCA418BBF7DCE60B C272E9466AAE98F9 3CF149E90E8C04D9 Dec 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B F56701DAF0388216 3CF149E90E8C04D9 Schaad & Housley Informational [Page 36] RFC 3394 AES Key Wrap Algorithm September 2002 14 In 15342443CB95ADBF 4745856AF333F01F BCA418BBF7DCE60B F56701DAF0388216 3CF149E90E8C04D9 XorT 15342443CB95ADB1 4745856AF333F01F BCA418BBF7DCE60B F56701DAF0388216 3CF149E90E8C04D9 Dec 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 13 In 2E8E2B6BB201669B 4745856AF333F01F FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 XorT 2E8E2B6BB2016696 4745856AF333F01F FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 Dec F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 12 In F9ED8A1429515669 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 XorT F9ED8A1429515665 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 3CF149E90E8C04D9 Dec 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 73E3B6CBE5D05D74 11 In 0629EB29A42E4FD2 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 73E3B6CBE5D05D74 XorT 0629EB29A42E4FD9 D6AE29ECE7192D43 FBEC169FA5C0F6BA F56701DAF0388216 73E3B6CBE5D05D74 Dec DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA C365B66943E2D760 73E3B6CBE5D05D74 10 In DBA417FB51F9E3C1 D6AE29ECE7192D43 FBEC169FA5C0F6BA C365B66943E2D760 73E3B6CBE5D05D74 XorT DBA417FB51F9E3CB D6AE29ECE7192D43 FBEC169FA5C0F6BA C365B66943E2D760 73E3B6CBE5D05D74 Dec 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 9 In 1A681354E84C41F1 D6AE29ECE7192D43 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 XorT 1A681354E84C41F8 D6AE29ECE7192D43 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 Dec C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 Schaad & Housley Informational [Page 37] RFC 3394 AES Key Wrap Algorithm September 2002 8 In C58B9D3AC6D5B946 E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 XorT C58B9D3AC6D5B94E E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 73E3B6CBE5D05D74 Dec 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 E5923CB9FDB56FBC 7 In 66D7A8ADD086B9DA E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 E5923CB9FDB56FBC XorT 66D7A8ADD086B9DD E7D1194D853E53F8 EFD48BA304945576 C365B66943E2D760 E5923CB9FDB56FBC Dec 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576 6CA405593A3B5154 E5923CB9FDB56FBC 6 In 963AAFFD96B223EA E7D1194D853E53F8 EFD48BA304945576 6CA405593A3B5154 E5923CB9FDB56FBC XorT 963AAFFD96B223EC E7D1194D853E53F8 EFD48BA304945576 6CA405593A3B5154 E5923CB9FDB56FBC Dec 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC 5 In 4EF02EDD3146AFBE E7D1194D853E53F8 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC XorT 4EF02EDD3146AFBB E7D1194D853E53F8 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC Dec 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC 4 In 564408FDD0DD2EA0 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC XorT 564408FDD0DD2EA4 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 E5923CB9FDB56FBC Dec 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 08090A0B0C0D0E0F 3 In 9DF8F5405FBC00C2 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 08090A0B0C0D0E0F XorT 9DF8F5405FBC00C1 F661BD9F31FBFA31 F60E0CDB7F429FE8 6CA405593A3B5154 08090A0B0C0D0E0F Dec D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 08090A0B0C0D0E0F Schaad & Housley Informational [Page 38] RFC 3394 AES Key Wrap Algorithm September 2002 2 In D450EA5C5BBCB563 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 08090A0B0C0D0E0F XorT D450EA5C5BBCB561 F661BD9F31FBFA31 F60E0CDB7F429FE8 0001020304050607 08090A0B0C0D0E0F Dec 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F 1 In 794314D454E3FDE0 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F XorT 794314D454E3FDE1 F661BD9F31FBFA31 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F Dec A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F Testo in chiaro: A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 0001020304050607 08090A0B0C0D0E0F Valore tornato: Chiave: 00112233445566778899AABBCCDDEEFF000102030405060708090A0B0C0D0E0F 5. Considerazioni sulla sicurezza L’algoritmo key wrap include un forte controllo di integrita’ della chiave. Se la decifratura produce il valore di verifica aspettato in A[0] la possibilita’ che la chiave sia corrotta e’ di 2^-64. Se invece produce un valore inaspettato l’implementazione dell’algoritmo DEVE ritornare un errore, e NON DEVE tornare nessuna chiave. Le implementazioni devono proteggere la KEK da divulgazioni. Compromettere la KEK puo’ determinare la divulgazione di tutta la chiave protetta con quella KEK. 6. Riferimenti AES National Institute of Standards and Technology. FIPS Pub 197: Advanced Encryption Standard (AES). 26 November 2001. AES-WRAP National Institute of Standards and Technology. AES Key Wrap Specification. 17 November 2001. [http://csrc.nist.gov/encryption/kms/key-wrap.pdf] Schaad & Housley Informational [Page 39] RFC 3394 AES Key Wrap Algorithm September 2002 7. Ringraziamenti Buona parte del testo di questo documento e’ stato preso dal [AES-WRAP]. Gli autori di quel documento sono responsabili dello sviluppo dell’algoritmo AES Key Wrap. 8. Indirizzi degli autori Jim Schaad Soaring Hawk Consulting EMail: jimsch@exmsft.com Russell Housley RSA Laboratories 918 Spring Knoll Drive Herndon, VA 20170 USA EMail: rhousley@rsasecurity.com Schaad & Housley Informational [Page 40] RFC 3394 AES Key Wrap Algorithm September 2002 9. Riporto integrale del Copyright (in lingua originale) Copyright (C) The Internet Society (2002). All Rights Reserved. This document and translations of it may be copied and furnished to others provided that the above copyright notice and this paragraph are included on all such copies. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as required to translate it into languages other than English. The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns. This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Acknowledgement Funding for the RFC Editor function is currently provided by the Internet Society. Schaad & Housley Informational [Page 41]