Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 15
Abstract: The Transport Layer Security (TLS) master secret is not cryptographically bound to important session parameters such as the server certificate. Consequently, it is possible for an active attacker to set up two sessions, one with a client and another with a server, such that the master secrets on the two sessions are the same. Thereafter, any mechanism that relies on the master secret for authentication, including session resumption, becomes vulnerable to a man-in-the-middle attack, where the attacker can simply forward messages back and forth between the client and server. This specification defines a TLS extension that contextually binds the master secret to a log of the full handshake that computes it, thus preventing such attacks.
Publication Date: 2015-09-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7627
Link: https://doi.org/10.17487/RFC7627
Author(s): Karthikeyan Bhargavan
Antoine Delignat-Lavaud
Alfredo Pironti
Adam Langley
Marsh Ray

Latest version of IETF RFC 7627

Document Versions — IETF RFC 7627

▶ IETF RFC 7627 (2015-09-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

RFC9846 NOT IN REGISTRY

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 5246 [Superseded*]

Bibliographic Reference(s)

10.1007-11542322_6 — COMPOUND-AUTH EXTERNAL
10.1109-SP.2014.14 — TRIPLE-HS EXTERNAL
NIST.SP.800-108 — 800-108 EXTERNAL
Ray, M., "Authentication Gap in TLS Renegotiation", 2009. EXTERNAL
Bhargavan, K., Delignat-Lavaud, A., and A. Pironti, "Verified Contributive Channel Bindings for Compound Authentication", Network and Distributed System Security Symposium (NDSS), 2015. EXTERNAL
IETF RFC 4251 [Active*]
IETF RFC 5077 [Superseded*]
IETF RFC 5705 [Active*]
IETF RFC 5746 [Active*]
IETF RFC 5929 [Active*]
IETF RFC 6101 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 7457 [Active*]
IETF RFC 7568 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7627.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7627, Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension. Available at https://doi.org/10.17487/RFC7627

Snippet:

IETF RFC 7627, Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension. Available at https://doi.org/10.17487/RFC7627

HTML (ISO 690 compliant)

Preview:

IETF RFC 7627, Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension. Available at https://doi.org/10.17487/RFC7627

Snippet:

<span class="citation"><cite>IETF RFC 7627</cite>, Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension. Available at <a href="https://doi.org/10.17487/RFC7627" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7627</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7627, Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
doi: 10.17487/RFC7627
url: https://doi.org/10.17487/RFC7627

Snippet:

<li>
<cite id="bib-rfc7627">IETF RFC 7627</cite>, Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
<span class="doi">10.17487/RFC7627</span>
</li>

Referenced By

IETF RFC 7919 [Active*]
IETF RFC 7925 [Active*]
IETF RFC 8446 [Superseded*]