API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 9150
[ACTIVE]

TLS 1.3 Authentication and Integrity-Only Cipher Suites

Metadata

Publisher
IETF
Doc Type
Informational
Pages
10
Abstract
This document defines the use of cipher suites for TLS 1.3 based on Hashed Message Authentication Code (HMAC). Using these cipher suites provides server and, optionally, mutual authentication and data authenticity, but not data confidentiality. Cipher suites with these properties are not of general applicability, but there are use cases, specifically in Internet of Things (IoT) and constrained environments, that do not require confidentiality of exchanged messages while still requiring integrity protection, server authentication, and optional client authentication. This document gives examples of such use cases, with the caveat that prior to using these integrity-only cipher suites, a threat model for the situation at hand is needed, and a threat analysis must be performed within that model to determine whether the use of integrity-only cipher suites is appropriate. The approach described in this document is not endorsed by the IETF and does not have IETF consensus, but it is presented here to enable interoperable implementation of a reduced-security mechanism that provides authentication and message integrity without supporting confidentiality.
Publication Date
2022-04-01
Status Note
Informational
DOI
10.17487/RFC9150
Link
https://doi.org/10.17487/RFC9150
Author(s)
Nancy Cam-Winget
Jack Visoky
Keyword(s)
HMAC, IoT, Constrained Devices
Latest version of IETF RFC 9150

Document Versions — IETF RFC 9150

  • ▶ IETF RFC 9150 (2022-04-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9150.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 9150, TLS 1.3 Authentication and Integrity-Only Cipher Suites. Available at https://doi.org/10.17487/RFC9150
Snippet:
IETF RFC 9150, TLS 1.3 Authentication and Integrity-Only Cipher Suites. Available at https://doi.org/10.17487/RFC9150

HTML (ISO 690 compliant)

Preview:
IETF RFC 9150, TLS 1.3 Authentication and Integrity-Only Cipher Suites. Available at https://doi.org/10.17487/RFC9150
Snippet:
<span class="citation"><cite>IETF RFC 9150</cite>, TLS 1.3 Authentication and Integrity-Only Cipher Suites. Available at <a href="https://doi.org/10.17487/RFC9150" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9150</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 9150, TLS 1.3 Authentication and Integrity-Only Cipher Suites
doi: 10.17487/RFC9150
url: https://doi.org/10.17487/RFC9150
Snippet:
<li>
<cite id="bib-rfc9150">IETF RFC 9150</cite>, TLS 1.3 Authentication and Integrity-Only Cipher Suites
<span class="doi">10.17487/RFC9150</span>
</li>

Referenced By