1. Proposed PRF Text Changes
March 2003
Proposed PRF Text Changes
Jesse Walker
Intel Corporation
Jesse Walker, Intel Corporation

2. Proposed PRF PRF-AES(Key, AuthenticatorMAC,
March 2003
Proposed PRF
PRF-AES(Key, AuthenticatorMAC,
SupplicantMAC, Label, Nonce, Length)
R  “”
iterations  (Length+15)/16
for i  1 to iterations do
R  R | AES-CBC-MAC(Key,
AuthenticatorMAC | SupplicantMAC | i
| Label | Nonce | Length)
return Substring(R, 0, Length)
Jesse Walker, Intel Corporation

3. March 2003
Discussion
Neither current PRF nor proposed PRF conforms to draft NIST SP
Current PRF does not exploit full entropy of PMK, but proposed PRF does
Current PRF subject to prefix attacks, but proposed PRF does
Jesse Walker, Intel Corporation

4. March 2003
Motions
Instruct the editor to replace the text of Clause with text from doc r2
Instruct the Chair to submit the following comment to NIST comments list by April 3:
“IEEE would like NIST to allow AES-CBC-MAC to be used in approved KDF functions as an alternative to a one-way hash function in Clause 5.3 of draft SP ”
Jesse Walker, Intel Corporation