Cryptographic Protection of TCP Streams (tcpcrypt)

Metadata

Publisher: IETF
Doc Type: Experimental
Pages: 32
Abstract: This document specifies "tcpcrypt", a TCP encryption protocol designed for use in conjunction with the TCP Encryption Negotiation Option (TCP-ENO). Tcpcrypt coexists with middleboxes by tolerating resegmentation, NATs, and other manipulations of the TCP header. The protocol is self-contained and specifically tailored to TCP implementations, which often reside in kernels or other environments in which large external software dependencies can be undesirable. Because the size of TCP options is limited, the protocol requires one additional one-way message latency to perform key exchange before application data can be transmitted. However, the extra latency can be avoided between two hosts that have recently established a previous tcpcrypt connection.
Publication Date: 2019-05-01
Status Note: Experimental
DOI: 10.17487/RFC8548
Link: https://doi.org/10.17487/RFC8548
Author(s): Andrea Bittau
Daniel B. Giffin
Mark J. Handley
David Mazieres
Quinn Slack
Eric W. Smith
Keyword(s): TCP, Encryption

Latest version of IETF RFC 8548

Document Versions — IETF RFC 8548

▶ IETF RFC 8548 (2019-05-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

10.1109-IEEESTD.2000.92292 — IEEE1363 EXTERNAL
NIST FIPS 186-4 [Active]
IETF RFC 793 [Superseded*]
IETF RFC 2018 [Active*]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 5869 [Active*]
IETF RFC 7120 [Active*]
IETF RFC 7748 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8439 [Active*]
IETF RFC 8547 [Active*]

Bibliographic Reference(s)

IETF.draft-ietf-tcpinc-api-06 — TCPINC-API EXTERNAL
Bittau, A., Hamburg, M., Handley, M., Mazieres, D., and D. Boneh, "The case for ubiquitous transport-level encryption", USENIX Security Symposium, August 2010. EXTERNAL
Bernstein, D. and T. Lange, "Failures in NIST's ECC Standards", January 2016, < https://cr.yp.to/newelliptic/nistecc-20160106.pdf >. EXTERNAL
IETF RFC 1122 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 7696 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8548.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8548, Cryptographic Protection of TCP Streams (tcpcrypt). Available at https://doi.org/10.17487/RFC8548

Snippet:

IETF RFC 8548, Cryptographic Protection of TCP Streams (tcpcrypt). Available at https://doi.org/10.17487/RFC8548

HTML (ISO 690 compliant)

Preview:

IETF RFC 8548, Cryptographic Protection of TCP Streams (tcpcrypt). Available at https://doi.org/10.17487/RFC8548

Snippet:

<span class="citation"><cite>IETF RFC 8548</cite>, Cryptographic Protection of TCP Streams (tcpcrypt). Available at <a href="https://doi.org/10.17487/RFC8548" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8548</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8548, Cryptographic Protection of TCP Streams (tcpcrypt)
doi: 10.17487/RFC8548
url: https://doi.org/10.17487/RFC8548

Snippet:

<li>
<cite id="bib-rfc8548">IETF RFC 8548</cite>, Cryptographic Protection of TCP Streams (tcpcrypt)
<span class="doi">10.17487/RFC8548</span>
</li>

Referenced By

IETF RFC 8803 [Active*]
IETF RFC 9065 [Active*]
IETF RFC 9293 [Active*]