Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Metadata
- Publisher
- IETF
- Doc Type
- Best Practice
- Pages
- 34
- Abstract
- Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) are used to protect data exchanged over a wide range of application protocols and can also form the basis for secure transport protocols. Over the years, the industry has witnessed several serious attacks on TLS and DTLS, including attacks on the most commonly used cipher suites and their modes of operation. This document provides the latest recommendations for ensuring the security of deployed services that use TLS and DTLS. These recommendations are applicable to the majority of use cases. RFC 7525, an earlier version of the TLS recommendations, was published when the industry was transitioning to TLS 1.2. Years later, this transition is largely complete, and TLS 1.3 is widely available. This document updates the guidance given the new environment and obsoletes RFC 7525. In addition, this document updates RFCs 5288 and 6066 in view of recent attacks.
- Publication Date
- 2022-11-01
- Status Note
- Best Current Practice
- DOI
10.17487/RFC9325- Link
- https://doi.org/10.17487/RFC9325
- Author(s)
- Yaron ShefferPeter Saint-AndreThomas Fossati
Latest version of IETF RFC 9325
Document Versions — IETF RFC 9325
-
▶ IETF RFC 9325 (2022-11-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3766 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5288 [Active*]
- IETF RFC 5746 [Active*]
- IETF RFC 6066 [Active*]
- IETF RFC 6125 [Superseded*]
- IETF RFC 6176 [Active*]
- IETF RFC 6347 [Superseded*]
- IETF RFC 6979 [Active*]
- IETF RFC 7301 [Active*]
- IETF RFC 7366 [Active*]
- IETF RFC 7465 [Active*]
- IETF RFC 7627 [Superseded*]
- IETF RFC 7748 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8422 [Superseded*]
- IETF RFC 8446 [Superseded*]
- IETF RFC 8996 [Active*]
- IETF RFC 9147 [Active*]
- IETF RFC 9155 [Active*]
Bibliographic Reference(s)
- 10.1007-3-540-36288-6_16 — Antipa2003 EXTERNAL
- 10.1007-978-3-319-24174-6_21 — ICA EXTERNAL
- 10.1007-978-3-540-45146-4_1 — TWIRL EXTERNAL
- 10.1007-978-3-642-14623-7_18 — Kleinjung2010 EXTERNAL
- 10.1007-978-3-642-25385-0_20 — PatersonRS11 EXTERNAL
- 10.1109-EuroSP.2018.00031 — Poddebniak2017 EXTERNAL
- 10.1109-ISCA.2014.6853210 — Kim2014 EXTERNAL
- 10.1109-sp.2007.8 — DegabrieleP07 EXTERNAL
- 10.1109-sp.2014.14 — Triple-Handshake EXTERNAL
- 10.1109-sp.2017.17 — CRLite EXTERNAL
- 10.1145-358699.358718 — Multiple-Encryption EXTERNAL
- 10.1145-2810103.2813707 — Logjam EXTERNAL
- 10.1145-2987443.2987480 — Springall16 EXTERNAL
- 10.1145-3274694.3274708 — Sy2018 EXTERNAL
- 10.1145-3278532.3278543 — Chung18 EXTERNAL
- 10.2139-ssrn.1591033 — Soghoian2011 EXTERNAL
- 10.14722-ndss.2020.24084 — LetsRevoke EXTERNAL
- IETF.draft-ietf-tls-esni-15 — I-D.ietf-tls-esni EXTERNAL
- IETF.draft-ietf-uta-tls13-iot-profile-05 — I-D.ietf-uta-tls13-iot-profile EXTERNAL
- IETF.draft-irtf-cfrg-aead-limits-05 — I-D.irtf-cfrg-aead-limits EXTERNAL
- IETF.draft-irtf-cfrg-det-sigs-with-noise-00 — I-D.mattsson-cfrg-det-sigs-with-noise EXTERNAL
- NIST.SP.800-38-SERIES-DRAFTS — Joux2006 EXTERNAL
- NIST.SP.800-56Ar3 — KEYAGREEMENT EXTERNAL
- Böck, H., Zauner, A., Devlin, S., Somorovsky, J., and P. Jovanovic, "Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS", May 2016, <https://eprint.iacr.org/2016/475.pdf>. EXTERNAL
- US-CERT, "SSL 3.0 Protocol Vulnerability and POODLE Attack", October 2014, <https://www.us-cert.gov/ncas/alerts/TA14-290A>. EXTERNAL
- Brinkmann, M., Dresen, C., Merget, R., Poddebniak, D., Müller, J., Somorovsky, J., Schwenk, J., and S. Schinzel, "ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication", 30th USENIX Security Symposium (USENIX Security 21), August 2021, <https://www.usenix.org/conference/usenixsecurity21/presentation/brinkmann>. EXTERNAL
- Heninger, N., Durumeric, Z., Wustrow, E., and J. A. Halderman, "Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices", 21st Usenix Security Symposium, August 2012. EXTERNAL
- MITRE, "Common Vulnerabilities and Exposures", <https://cve.mitre.org>. EXTERNAL
- CA/Browser Forum, "Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates", Version 1.8.4, April 2022, <https://cabforum.org/documents/>. EXTERNAL
- Bernstein, D. J. and T. Lange, "SafeCurves: choosing safe curves for elliptic-curve cryptography", December 2014, <https://safecurves.cr.yp.to>. EXTERNAL
- Merget, R., Brinkmann, M., Aviram, N., Somorovsky, J., Mittmann, J., and J. Schwenk, "Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)", 30th USENIX Security Symposium (USENIX Security 21), 2021, <https://www.usenix.org/conference/usenixsecurity21/presentation/merget>. EXTERNAL
- Aviram, N., Schinzel, S., Somorovsky, J., Heninger, N., Dankel, M., Steube, J., Valenta, L., Adrian, D., Halderman, J., Dukhovni, V., Käsper, E., Cohney, S., Engels, S., Paar, C., and Y. Shavitt, "DROWN: Breaking TLS using SSLv2", 25th USENIX Security Symposium (USENIX Security 16), August 2016, <https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/aviram>. EXTERNAL
- IANA, "Transport Layer Security (TLS) Parameters", <https://www.iana.org/assignments/tls-parameters>. EXTERNAL
- IETF RFC 1939 [Active*]
- IETF RFC 2026 [Active*]
- IETF RFC 2246 [Superseded*]
- IETF RFC 3261 [Active*]
- IETF RFC 3602 [Active*]
- IETF RFC 4346 [Superseded*]
- IETF RFC 4347 [Superseded*]
- IETF RFC 4949 [Active*]
- IETF RFC 5077 [Superseded*]
- IETF RFC 5116 [Active*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5321 [Active*]
- IETF RFC 6101 [Active*]
- IETF RFC 6120 [Active*]
- IETF RFC 6698 [Active*]
- IETF RFC 6797 [Active*]
- IETF RFC 6960 [Active*]
- IETF RFC 6961 [Superseded*]
- IETF RFC 7228 [Active*]
- IETF RFC 7435 [Active*]
- IETF RFC 7457 [Active*]
- IETF RFC 7507 [Superseded*]
- IETF RFC 7525 [Superseded*]
- IETF RFC 7568 [Active*]
- IETF RFC 7590 [Active*]
- RFC7633 — RFC7633 EXTERNAL
- RFC7672 — RFC7672 EXTERNAL
- RFC7673 — RFC7673 EXTERNAL
- RFC7712 — RFC7712 EXTERNAL
- IETF RFC 7919 [Active*]
- IETF RFC 7924 [Active*]
- IETF RFC 7925 [Active*]
- RFC8452 — RFC8452 EXTERNAL
- RFC8461 — RFC8461 EXTERNAL
- RFC8470 — RFC8470 EXTERNAL
- IETF RFC 8879 [Active*]
- IETF RFC 9000 [Active*]
- RFC9001 — QUIC-TLS EXTERNAL
- IETF RFC 9051 [Active*]
- IETF RFC 9110 [Active*]
- IETF RFC 9112 [Active*]
- IETF RFC 9113 [Active*]
- IETF RFC 9162 [Active*]
- IETF RFC 9191 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9325.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9325, Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC9325
Snippet:
IETF RFC 9325, Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC9325
HTML (ISO 690 compliant)
Preview:
IETF RFC 9325, Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC9325
Snippet:
<span class="citation"><cite>IETF RFC 9325</cite>, Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at <a href="https://doi.org/10.17487/RFC9325" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9325</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9325, Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
doi: 10.17487/RFC9325
url: https://doi.org/10.17487/RFC9325
doi: 10.17487/RFC9325
url: https://doi.org/10.17487/RFC9325
Snippet:
<li> <cite id="bib-rfc9325">IETF RFC 9325</cite>, Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) <span class="doi">10.17487/RFC9325</span> </li>
Referenced By
- IETF RFC 10015 [Active*]
- IETF RFC 9456 [Active*]
- IETF RFC 9525 [Active*]
- IETF RFC 9918 [Active*]
- IETF RFC 9930 [Active*]