Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 29
Abstract: Traditional finite-field-based Diffie-Hellman (DH) key exchange during the Transport Layer Security (TLS) handshake suffers from a number of security, interoperability, and efficiency shortcomings. These shortcomings arise from lack of clarity about which DH group parameters TLS servers should offer and clients should accept. This document offers a solution to these shortcomings for compatible peers by using a section of the TLS "Supported Groups Registry" (renamed from "EC Named Curve Registry" by this document) to establish common finite field DH parameters with known structure and a mechanism for peers to negotiate support for these groups. This document updates TLS versions 1.0 (RFC 2246), 1.1 (RFC 4346), and 1.2 (RFC 5246), as well as the TLS Elliptic Curve Cryptography (ECC) extensions (RFC 4492).
Publication Date: 2016-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC7919
Link: https://doi.org/10.17487/RFC7919
Author(s): Daniel Kahn Gillmor
Keyword(s): Diffie-Hellman, Discrete Logarithm, Finite Field, TLS

Latest version of IETF RFC 7919

Document Versions — IETF RFC 7919

▶ IETF RFC 7919 (2016-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4492 [Superseded*]
IETF RFC 5226 [Superseded*]
IETF RFC 5246 [Superseded*]
RFC7918 — RFC7918 EXTERNAL

Bibliographic Reference(s)

10.1109-SP.2014.14 — TRIPLE-HS EXTERNAL
10.1145-2382196.2382206 — Cross-Protocol EXTERNAL
NIST.SP.800-57 — NIST.SP800-57 EXTERNAL
Electronic Frontier Foundation, "Panopticlick: Is your browser safe against tracking?", < https://panopticlick.eff.org/ >. EXTERNAL
Brunner, T. and A. Steffen, "IKEv2 Cipher Suites: Diffie Hellman Groups", October 2013, < https://wiki.strongswan.org/projects/strongswan/wiki/ IKEv2CipherSuites#Diffie-Hellman-Groups >. EXTERNAL
European Union Agency for Network and Information Security (ENISA), "Algorithms, Key Sizes and Parameters Report - 2014", November 2014, < https://www.enisa.europa.eu/publications/ algorithms-key-size-and-parameters-report-2014 >. EXTERNAL
Schneier, B. and D. Wagner, "Analysis of the SSL 3.0 protocol", In Proceedings of the Second UNIX Workshop on Electronic Commerce, 1996, < https://www.schneier.com/paper-ssl.pdf >. EXTERNAL
European Network of Excellence in Cryptology II, "ECRYPT II Yearly Report on Algorithms and Keysizes (2011-2012)", Revision 1.0, September 2012, < http://www.ecrypt.eu.org/ecrypt2/documents/D.SPA.20.pdf >. EXTERNAL
IETF RFC 2246 [Superseded*]
IETF RFC 3526 [Active*]
IETF RFC 4346 [Superseded*]
RFC4419 — RFC4419 EXTERNAL
RFC7027 — RFC7027 EXTERNAL
IETF RFC 7627 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7919.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 7919, Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS). Available at https://doi.org/10.17487/RFC7919

Snippet:

IETF RFC 7919, Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS). Available at https://doi.org/10.17487/RFC7919

HTML (ISO 690 compliant)

Preview:

IETF RFC 7919, Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS). Available at https://doi.org/10.17487/RFC7919

Snippet:

<span class="citation"><cite>IETF RFC 7919</cite>, Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS). Available at <a href="https://doi.org/10.17487/RFC7919" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7919</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 7919, Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
doi: 10.17487/RFC7919
url: https://doi.org/10.17487/RFC7919

Snippet:

<li>
<cite id="bib-rfc7919">IETF RFC 7919</cite>, Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)
<span class="doi">10.17487/RFC7919</span>
</li>

Referenced By

IETF RFC 8422 [Superseded*]
IETF RFC 8446 [Superseded*]