Guidance for External Pre-Shared Key (PSK) Usage in TLS

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 13
Abstract: This document provides usage guidance for external Pre-Shared Keys (PSKs) in Transport Layer Security (TLS) 1.3 as defined in RFC 8446. It lists TLS security properties provided by PSKs under certain assumptions, then it demonstrates how violations of these assumptions lead to attacks. Advice for applications to help meet these assumptions is provided. This document also discusses PSK use cases and provisioning processes. Finally, it lists the privacy and security properties that are not provided by TLS 1.3 when external PSKs are used.
Publication Date: 2022-07-01
Status Note: Informational
DOI: 10.17487/RFC9257
Link: https://doi.org/10.17487/RFC9257
Author(s): Russ Housley
Jonathan Hoyland
Mohit Sethi
Christopher A. Wood

Latest version of IETF RFC 9257

Document Versions — IETF RFC 9257

▶ IETF RFC 9257 (2022-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 9258 [Active*]

Bibliographic Reference(s)

10.1007-978-3-540-45146-4_24 — SIGMA EXTERNAL
10.1007-s00145-021-09387-y — Selfie EXTERNAL
10.1145-3321705.3329813 — Sethi19 EXTERNAL
ETSI.TR-133-919.2014 — GAA EXTERNAL
IETF.draft-ietf-tls-ctls-06 — I-D.ietf-tls-ctls EXTERNAL
IETF.draft-irtf-cfrg-cpace-06 — I-D.irtf-cfrg-cpace EXTERNAL
IETF.draft-irtf-cfrg-opaque-09 — I-D.irtf-cfrg-opaque EXTERNAL
IETF.draft-mattsson-emu-eap-tls-psk-00 — I-D.mattsson-emu-eap-tls-psk EXTERNAL
OMA.TS-LightweightM2M.V1_0.20170208 — LWM2M EXTERNAL
Bundesamt für Sicherheit in der Informationstechnik, "Technical Guideline TR-03112-7 eCard-API-Framework - Protocols", version 1.1.5, April 2015, <https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR03112/TR-03112-api_teil7.pdf?__blob=publicationFile&v=1>. EXTERNAL
Akhmetzyanova, L., Alekseev, E., Smyshlyaeva, E., and A. Sokolov, "Continuing to reflect on TLS 1.3 with external PSK", April 2019, <https://eprint.iacr.org/2019/421.pdf>. EXTERNAL
IETF RFC 2865 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 4122 [Superseded*]
IETF RFC 4279 [Active*]
IETF RFC 6066 [Active*]
IETF RFC 6614 [Active*]
IETF RFC 7925 [Active*]
IETF RFC 8773 [Superseded*]
IETF RFC 9147 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9257.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9257, Guidance for External Pre-Shared Key (PSK) Usage in TLS. Available at https://doi.org/10.17487/RFC9257

Snippet:

IETF RFC 9257, Guidance for External Pre-Shared Key (PSK) Usage in TLS. Available at https://doi.org/10.17487/RFC9257

HTML (ISO 690 compliant)

Preview:

IETF RFC 9257, Guidance for External Pre-Shared Key (PSK) Usage in TLS. Available at https://doi.org/10.17487/RFC9257

Snippet:

<span class="citation"><cite>IETF RFC 9257</cite>, Guidance for External Pre-Shared Key (PSK) Usage in TLS. Available at <a href="https://doi.org/10.17487/RFC9257" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9257</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9257, Guidance for External Pre-Shared Key (PSK) Usage in TLS
doi: 10.17487/RFC9257
url: https://doi.org/10.17487/RFC9257

Snippet:

<li>
<cite id="bib-rfc9257">IETF RFC 9257</cite>, Guidance for External Pre-Shared Key (PSK) Usage in TLS
<span class="doi">10.17487/RFC9257</span>
</li>

Referenced By

IETF RFC 9645 [Active*]
IETF RFC 9846 [Active*]