Prohibiting RC4 Cipher Suites

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 6
Abstract: This document requires that Transport Layer Security (TLS) clients and servers never negotiate the use of RC4 cipher suites when they establish connections. This applies to all TLS versions. This document updates RFCs 5246, 4346, and 2246.
Publication Date: 2015-02-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7465
Link: https://doi.org/10.17487/RFC7465
Author(s): Andrei Popov
Keyword(s): TLS

Latest version of IETF RFC 7465

Document Versions — IETF RFC 7465

▶ IETF RFC 7465 (2015-02-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 8996 [Active*]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2246 [Superseded*]
IETF RFC 4346 [Superseded*]
IETF RFC 5246 [Superseded*]

Bibliographic Reference(s)

ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
Fluhrer, S., Mantin, I., and A. Shamir, "Weaknesses in the Key Scheduling Algorithm of RC4", Selected Areas of Cryptography: SAC 2001, Lecture Notes in Computer Science Vol. 2259, pp 1-24, 2001. EXTERNAL
Mantin, I. and A. Shamir, "A Practical Attack on Broadcast RC4", Fast Software Encryption: FSE 2001, Lecture Notes in Computer Science Vol. 2355, pp 152-164, 2002. EXTERNAL
AlFardan, N., Bernstein, D., Paterson, K., Poettering, B., and J. Schuldt, "On the Security of RC4 in TLS and WPA", USENIX Security Symposium, July 2013, < https://www.usenix.org/conference/usenixsecurity13/ security-rc4-tls >. EXTERNAL
Paul, G. and S. Maitra, "Permutation after RC4 Key Scheduling Reveals the Secret Key", Selected Areas of Cryptography: SAC 2007, Lecture Notes on Computer Science, Vol. 4876, pp 360-337, 2007. EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7465.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7465, Prohibiting RC4 Cipher Suites. Available at https://doi.org/10.17487/RFC7465

Snippet:

IETF RFC 7465, Prohibiting RC4 Cipher Suites. Available at https://doi.org/10.17487/RFC7465

HTML (ISO 690 compliant)

Preview:

IETF RFC 7465, Prohibiting RC4 Cipher Suites. Available at https://doi.org/10.17487/RFC7465

Snippet:

<span class="citation"><cite>IETF RFC 7465</cite>, Prohibiting RC4 Cipher Suites. Available at <a href="https://doi.org/10.17487/RFC7465" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7465</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7465, Prohibiting RC4 Cipher Suites
doi: 10.17487/RFC7465
url: https://doi.org/10.17487/RFC7465

Snippet:

<li>
<cite id="bib-rfc7465">IETF RFC 7465</cite>, Prohibiting RC4 Cipher Suites
<span class="doi">10.17487/RFC7465</span>
</li>

Referenced By

IETF RFC 7525 [Superseded*]
IETF RFC 7568 [Active*]
IETF RFC 7925 [Active*]
IETF RFC 8143 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 8996 [Active*]
IETF RFC 9231 [Active*]