Chulhee Lee email to hybrid reflector July 11, 2013

Dear all,

The testplan states (ANNEX V.  Encrypted Source Code Submitted to VQEG):

This submission is not required but is offered in case there is a bug in the software that can be fixed without changing the algorithm.

A reasonable interpretation would be that bug fixing is allowed as long as it does not change the algorithm.

Regarding the bug fixing procedure, the testplan also states:

The proponent will make a summary of the modifications required. The ILG will review and approve the modifications, if the modification is regarded as a bug fix only.

The testplan mandates that the ILG will approve the modifications if the modification is regarded as a bug fix only. ILG’s inability to verify whether bug fixing does not change the algorithm may not be a valid rejection. If ILG is unable to do the verification, external experts may be consulted or the verification can be done among the proponents. The proponents can be asked to fully disclose the modifications and ILG or anyone in standard bodies may object the bug fixing if they can show that it actually changes the algorithm.

Best regards,

Chulhee