Merge pull request #1564 from DavidSchinazi/dev/clarify_aad

Clarify the extent of the AAD
quicwg · Jul 14, 2018 · 957f34e · 957f34e
2 parents 9659e57 + e73cc15
commit 957f34e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/draft-ietf-quic-tls.md b/draft-ietf-quic-tls.md
@@ -695,7 +695,8 @@ The exclusive OR of the padded packet number and the IV forms the AEAD
 nonce.
 
 The associated data, A, for the AEAD is the contents of the QUIC header,
-starting from the flags octet in either the short or long header.
+starting from the flags octet in either the short or long header, up to
+and including the unprotected packet number.
 
 The input plaintext, P, for the AEAD is the content of the QUIC frame following
 the header, as described in {{QUIC-TRANSPORT}}.