IETF RFC 10015
[ACTIVE]
Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 21
- Abstract
- For (D)TLS 1.2, this document deprecates the use of two key exchanges, namely Diffie-Hellman (DH) over a finite field and RSA. It also discourages the use of static Elliptic Curve Diffie-Hellman (ECDH) cipher suites. These prescriptions apply only to (D)TLS 1.2, since (D)TLS 1.0 and TLS 1.1 are deprecated by RFC 8996 and (D)TLS 1.3 either does not use the affected algorithms or does not share the relevant configuration options. (There is no DTLS version 1.1.) This document updates RFCs 4162, 4279, 4346, 4785, 5246, 5288, 5289, 5469, 5487, 5932, 6209, 6347, 6367, 6655, 7905, 8422, and 9325 to either deprecate or discourage the use of cipher suites using the above key exchange methods in (D)TLS 1.2 connections.
- Publication Date
- 2026-07-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC10015- Link
- https://doi.org/10.17487/RFC10015
- Author(s)
- Nimrod Aviram
- Keyword(s)
- RSA, Diffie-Hellman, DHE, ECDH, ECDHE
Latest version of IETF RFC 10015
Document Versions — IETF RFC 10015
-
▶ IETF RFC 10015 (2026-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 4162 [Active*]
- IETF RFC 4279 [Active*]
- IETF RFC 4346 [Superseded*]
- IETF RFC 4785 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5288 [Active*]
- IETF RFC 5289 [Active*]
- IETF RFC 5469 [Superseded*]
- RFC5487 — RFC5487 EXTERNAL
- IETF RFC 5932 [Active*]
- RFC6209 — RFC6209 EXTERNAL
- IETF RFC 6347 [Superseded*]
- IETF RFC 6367 [Active*]
- IETF RFC 6655 [Active*]
- IETF RFC 7905 [Active*]
- IETF RFC 7919 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8422 [Superseded*]
- IETF RFC 8996 [Active*]
- IETF RFC 9147 [Active*]
- IETF RFC 9325 [Active*]
- IETF RFC 9846 [Active*]
- IETF RFC 9847 [Active*]
Bibliographic Reference(s)
- 10.1007-978-3-030-56880-1_3 — DLOG795 EXTERNAL
- 10.1007-978-3-319-24174-6_21 — ICA EXTERNAL
- 10.1007-BFb0055716 — BLEI EXTERNAL
- 10.1145-2810103.2813657 — XPROT EXTERNAL
- 10.1145-3133956.3134029 — MAY4 EXTERNAL
- Meyer, C., Somorovsky, J., Weiss, E., Schwenk, J., Schinzel, S., and E. Tews, "Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks", Proceedings of the 23rd USENIX Security Symposium, August 2014, <https://www.usenix.org/system/files/conference/usenixsecurity14/sec14-paper-meyer.pdf>. EXTERNAL
- Aviram, N., Schinzel, S., Somorovsky, J., Heninger, N., Dankel, M., Steube, J., Valenta, L., Adrian, D., Halderman, J. A., Dukhovni, V., Käsper, E., Cohney, S., Engels, S., Paar, C., and Y. Shavitt, "DROWN: Breaking TLS using SSLv2", Proceedings of the 25th USENIX Security Symposium, August 2016, <https://drownattack.com/drown-attack-paper.pdf>. EXTERNAL
- Devlin, S. and F. Valsorda, "The PARIS256 Attack", 8 August 2018, <https://i.blackhat.com/us-18/Wed-August-8/us-18-Valsorda-Squeezing-A-Key-Through-A-Carry-Bit-wp.pdf>. EXTERNAL
- Valenta, L., Adrian, D., Sanso, A., Cohney, S., Fried, J., Hastings, M., Halderman, J. A., and N. Heninger, "Measuring small subgroup attacks against Diffie-Hellman", Cryptology ePrint Archive, Paper 2016/995, 17 October 2016, <https://eprint.iacr.org/2016/995/20161017:193515>. EXTERNAL
- Boeck, H., Somorovsky, J., and C. Young, "Return Of Bleichenbacher's Oracle Threat (ROBOT)", Proceedings of the 27th USENIX Security Symposium, August 2018, <https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-bock.pdf>. EXTERNAL
- Adrian, D., Bhargavan, K., Durumeric, Z., Gaudry, P., Green, M., Halderman, J. A., Heninger, N., Springall, D., Thomé, E., Valenta, L., VanderSloot, B., Wustrow, E., Zanella-Béguelin, S., and P. Zimmermann, "Weak Diffie-Hellman and the Logjam Attack", October 2015, <https://weakdh.org/>. EXTERNAL
- Merget, R., Brinkmann, M., Aviram, N., Somorovsky, J., Mittmann, J., and J. Schwenk, "Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)", 9 September 2020, <https://raccoon-attack.com/RacoonAttack.pdf>. EXTERNAL
- IANA, "Transport Layer Security (TLS) Parameters", <https://www.iana.org/assignments/tls-parameters>. EXTERNAL
- IETF RFC 4492 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC10015.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 10015, Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2. Available at https://doi.org/10.17487/RFC10015
Snippet:
IETF RFC 10015, Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2. Available at https://doi.org/10.17487/RFC10015
HTML (ISO 690 compliant)
Preview:
IETF RFC 10015, Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2. Available at https://doi.org/10.17487/RFC10015
Snippet:
<span class="citation"><cite>IETF RFC 10015</cite>, Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2. Available at <a href="https://doi.org/10.17487/RFC10015" target="_blank" rel="noopener">https://doi.org/10.17487/RFC10015</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 10015, Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2
doi: 10.17487/RFC10015
url: https://doi.org/10.17487/RFC10015
doi: 10.17487/RFC10015
url: https://doi.org/10.17487/RFC10015
Snippet:
<li> <cite id="bib-rfc10015">IETF RFC 10015</cite>, Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2 <span class="doi">10.17487/RFC10015</span> </li>