IETF RFC 8446

[SUPERSEDED]

The Transport Layer Security (TLS) Protocol Version 1.3

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 160
Abstract: This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document updates RFCs 5705 and 6066, and obsoletes RFCs 5077, 5246, and 6961. This document also specifies new requirements for TLS 1.2 implementations.
Publication Date: 2018-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8446
Link: https://doi.org/10.17487/RFC8446
Author(s): Eric Rescorla
Keyword(s): Authentication, Privacy, TLS

Latest version of IETF RFC 8446

Document Versions — IETF RFC 8446

▶ IETF RFC 8446 (2018-08-01)

THIS DOC [SUPERSEDED] [LATEST VERSION]

Superseded by:

RFC9846 NOT IN REGISTRY

Normative Reference(s)

10.1109-TIT.1976.1055638 — DH76 EXTERNAL
10.6028-NIST.FIPS.180-4 — SHS EXTERNAL
ANS.X9.62.2005 — ECDSA EXTERNAL
ISO 8825-1:2015 [Active]
NIST.SP.800-38D — GCM EXTERNAL
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5705 [Active*]
IETF RFC 5756 [Active*]
IETF RFC 5869 [Active*]
IETF RFC 6066 [Active*]
IETF RFC 6655 [Active*]
IETF RFC 6960 [Active*]
IETF RFC 6961 [Superseded*]
IETF RFC 6962 [Superseded*]
IETF RFC 6979 [Active*]
IETF RFC 7301 [Active*]
IETF RFC 7507 [Superseded*]
IETF RFC 7748 [Active*]
IETF RFC 7919 [Active*]
IETF RFC 8017 [Active*]
IETF RFC 8032 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8439 [Active*]

Bibliographic Reference(s)

10.1007-3-540-44448-3_42 — REKEY EXTERNAL
10.1007-3-540-44987-6_28 — CK01 EXTERNAL
10.1007-978-3-319-08506-7_8 — CLINIC EXTERNAL
10.1007-978-3-540-45146-4_24 — SIGMA EXTERNAL
10.1007-BF00124891 — DOW92 EXTERNAL
10.1109-CSF.2016.19 — CCG16 EXTERNAL
10.1109-IEEESTD.2000.92292 — IEEE1363 EXTERNAL
10.1109-SP.2016.34 — FGSW16 EXTERNAL
10.1109-SP.2016.35 — CHSV16 EXTERNAL
10.1109-SP.2016.36 — LXZFH16 EXTERNAL
10.1109-SP.2016.37 — BBFGKZ16 EXTERNAL
10.1109-SP.2017.26 — BBK17 EXTERNAL
10.1145-359340.359342 — RSA EXTERNAL
10.1145-2810103.2813657 — JSS15 EXTERNAL
10.1145-2976749.2978395 — CHECKOWAY EXTERNAL
10.1186-s13635-016-0030-7 — HCJC16 EXTERNAL
10.14722-ndss.2016.23418 — SLOTH EXTERNAL
IETF.draft-ietf-tls-tls13-vectors-06 — TLS13-TRACES EXTERNAL
NIST FIPS 186-4 [Active]
NIST.SP.800-56Ar3 — KEYAGREEMENT EXTERNAL
MacCarthaigh, C., "Security Review of TLS1.3 0-RTT", March 2017, < https://github.com/tlswg/tls13-spec/ issues/1001 >. EXTERNAL
Scott, S., Cremers, C., Horvat, M., and T. van der Merwe, "Revision 10: possible attack if client authentication is allowed during PSK", message to the TLS mailing list, 31 October 2015, < https://www.ietf.org/ mail-archive/web/tls/current/msg18215.html >. EXTERNAL
Bleichenbacher, D., "Chosen Ciphertext Attacks against Protocols Based on RSA Encryption Standard PKCS #1", Proceedings of CRYPTO '98, 1998. EXTERNAL
Bellare, M. and B. Tackmann, "The Multi-User Security of Authenticated Encryption: AES-GCM in TLS 1.3", Proceedings of CRYPTO 2016, July 2016, < https://eprint.iacr.org/2016/564 >. EXTERNAL
Weimer, F., "Factoring RSA Keys With TLS Perfect Forward Secrecy", September 2015. EXTERNAL
Patton, C. and T. Shrimpton, "Partially specified channels: The TLS 1.3 record layer without elision", 2018, < https://eprint.iacr.org/2018/634 >. EXTERNAL
Rescorla, E., "More compatibility measurement results", message to the TLS mailing list, 22 December 2017, < https://www.ietf.org/mail-archive/web/tls/current/ msg25179.html >. EXTERNAL
Krawczyk, H., "A Unilateral-to-Mutual Authentication Compiler for Key Exchange (with Applications to Client Authentication in TLS 1.3", Proceedings of ACM CCS 2016, October 2016, < https://eprint.iacr.org/2016/711 >. EXTERNAL
Benjamin, D., "Additional TLS 1.3 results from Chrome", message to the TLS mailing list, 18 December 2017, < https://www.ietf.org/mail-archive/web/tls/current/ msg25168.html >. EXTERNAL
Hlauschek, C., Gruber, M., Fankhauser, F., and C. Schanes, "Prying Open Pandora's Box: KCI Attacks against TLS", Proceedings of USENIX Workshop on Offensive Technologies, August 2015. EXTERNAL
Krawczyk, H. and H. Wee, "The OPTLS Protocol and TLS 1.3", Proceedings of EuroS&P 2016, March 2016, < https://eprint.iacr.org/2015/978 >. EXTERNAL
Krawczyk, H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme", Proceedings of CRYPTO 2010, August 2010, < https://eprint.iacr.org/2010/264 >. EXTERNAL
Dowling, B., Fischlin, M., Guenther, F., and D. Stebila, "A Cryptographic Analysis of the TLS 1.3 Full and Pre-shared Key Handshake Protocol", TRON 2016, February 2016, < https://eprint.iacr.org/2016/081 >. EXTERNAL
Dowling, B., Fischlin, M., Guenther, F., and D. Stebila, "A Cryptographic Analysis of the TLS 1.3 Handshake Protocol Candidates", Proceedings of ACM CCS 2015, October 2015, < https://eprint.iacr.org/2015/914 >. EXTERNAL
Badertscher, C., Matt, C., Maurer, U., Rogaway, P., and B. Tackmann, "Augmented Secure Channels and the Goal of the TLS 1.3 Record Layer", ProvSec 2015, September 2015, < https://eprint.iacr.org/2015/394 >. EXTERNAL
Hickman, K., "The SSL Protocol", February 1995. EXTERNAL
Benjamin, D., "Presentation before the TLS WG at IETF 100", November 2017, < https://datatracker.ietf.org/meeting/100/materials/ slides-100-tls-sessa-tls13/ >. EXTERNAL
Fischlin, M. and F. Guenther, "Replay Attacks on Zero Round-Trip Time: The Case of the TLS 1.3 Handshake Candidates", Proceedings of EuroS&P 2017, April 2017, < https://eprint.iacr.org/2017/082 >. EXTERNAL
Luykx, A. and K. Paterson, "Limits on Authenticated Encryption Use in TLS", August 2017, < http://www.isg.rhul.ac.uk/~kp/TLS-AEbounds.pdf >. EXTERNAL
Boneh, D. and D. Brumley, "Remote Timing Attacks Are Practical", USENIX Security Symposium, August 2003. EXTERNAL
Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Kohlweiss, M., Pan, J., Protzenko, J., Rastogi, A., Swamy, N., Zanella-Beguelin, S., and J. Zinzindohoue, "Implementing and Proving the TLS 1.3 Record Layer", Proceedings of IEEE Symposium on Security and Privacy (San Jose), May 2017, < https://eprint.iacr.org/2016/1178 >. EXTERNAL
Cremers, C., Horvat, M., Hoyland, J., Scott, S., and T. van der Merwe, "Awkward Handshake: Possible mismatch of client/server view on client authentication in post-handshake mode in Revision 18", message to the TLS mailing list, 10 February 2017, < https://www.ietf.org/ mail-archive/web/tls/current/msg22382.html >. EXTERNAL
Rescorla, E., "Preliminary data on Firefox TLS 1.3 Middlebox experiment", message to the TLS mailing list, 5 December 2017, < https://www.ietf.org/ mail-archive/web/tls/current/msg25091.html >. EXTERNAL
IETF RFC 3552 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4346 [Superseded*]
IETF RFC 4366 [Superseded*]
IETF RFC 4492 [Superseded*]
IETF RFC 5077 [Superseded*]
IETF RFC 5246 [Superseded*]
IETF RFC 5764 [Active*]
IETF RFC 5929 [Active*]
IETF RFC 6091 [Active*]
IETF RFC 6101 [Active*]
IETF RFC 6176 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 6520 [Active*]
IETF RFC 7230 [Superseded*]
IETF RFC 7250 [Active*]
IETF RFC 7465 [Active*]
IETF RFC 7568 [Active*]
IETF RFC 7627 [Superseded*]
IETF RFC 7685 [Active*]
IETF RFC 7924 [Active*]
IETF RFC 8305 [Active*]
IETF RFC 8422 [Superseded*]
IETF RFC 8447 [Active*]
IETF RFC 8449 [Active*]
T-REC-X.501 — 2 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8446.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8446, The Transport Layer Security (TLS) Protocol Version 1.3. Available at https://doi.org/10.17487/RFC8446

Snippet:

IETF RFC 8446, The Transport Layer Security (TLS) Protocol Version 1.3. Available at https://doi.org/10.17487/RFC8446

HTML (ISO 690 compliant)

Preview:

IETF RFC 8446, The Transport Layer Security (TLS) Protocol Version 1.3. Available at https://doi.org/10.17487/RFC8446

Snippet:

<span class="citation"><cite>IETF RFC 8446</cite>, The Transport Layer Security (TLS) Protocol Version 1.3. Available at <a href="https://doi.org/10.17487/RFC8446" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8446</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8446, The Transport Layer Security (TLS) Protocol Version 1.3
doi: 10.17487/RFC8446
url: https://doi.org/10.17487/RFC8446

Snippet:

<li>
<cite id="bib-rfc8446">IETF RFC 8446</cite>, The Transport Layer Security (TLS) Protocol Version 1.3
<span class="doi">10.17487/RFC8446</span>
</li>

Referenced By

Strategies to Protect Time Transfer in ST 2059-2 PTP Networks [Active]
A Multipronged Approach to Effectively Secure SMPTE ST 2059 Time Transfer [Active]
Strategies for Securing ST 2059-2 PTP Networks [Active]
DCI DCSS v1.4.2 [Superseded*]
IETF draft-ietf-emu-tls-eap-types-04 [Active*]
IETF draft-ietf-tls-ticketrequests-07 [Active*]
IETF RFC 8447 [Active*]
IETF RFC 8449 [Active*]
IETF RFC 8525 [Active*]
IETF RFC 8528 [Active*]
IETF RFC 8529 [Active*]
IETF RFC 8530 [Active*]
IETF RFC 8575 [Active*]
IETF RFC 8879 [Active*]
IETF RFC 8915 [Active*]
IETF RFC 8996 [Active*]
IETF RFC 9000 [Active*]
IETF RFC 9113 [Active*]
IETF RFC 9149 [Active*]
IETF RFC 9155 [Active*]
IETF RFC 9190 [Active*]
IETF RFC 9191 [Active*]
IETF RFC 9427 [Active*]
IETF RFC 9725 [Active*]