IETF RFC 9846

[ACTIVE]

The Transport Layer Security (TLS) Protocol Version 1.3

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 137
Abstract: This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document obsoletes RFC 8446, which specified TLS 1.3. This document obsoletes RFC 5246 (specifying TLS 1.2) and RFCs 5077, 6961, 7627, and 8422, all of which pertain to TLS 1.2 or earlier, and updates RFCs 5705 and 6066. This document also specifies new requirements for TLS 1.2 implementations.
Publication Date: 2026-07-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9846
Link: https://doi.org/10.17487/RFC9846
Author(s): Eric Rescorla

Latest version of IETF RFC 9846

Document Versions — IETF RFC 9846

▶ IETF RFC 9846 (2026-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST.fips.180-4 — SHS EXTERNAL
NIST.SP.800-38D — GCM EXTERNAL
NIST.sp.800-56ar3 — KEYAGREEMENT EXTERNAL
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 3279 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5705 [Active*]
IETF RFC 5756 [Active*]
IETF RFC 5869 [Active*]
IETF RFC 6066 [Active*]
IETF RFC 6655 [Active*]
IETF RFC 6960 [Active*]
IETF RFC 6961 [Superseded*]
IETF RFC 6962 [Superseded*]
IETF RFC 6979 [Active*]
IETF RFC 7301 [Active*]
IETF RFC 7507 [Superseded*]
IETF RFC 7627 [Superseded*]
IETF RFC 7748 [Active*]
IETF RFC 7919 [Active*]
IETF RFC 8017 [Active*]
IETF RFC 8032 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8439 [Active*]
RFC8701 — RFC8701 EXTERNAL
IETF RFC 8996 [Active*]
T-REC-X.690.2021 — X690 EXTERNAL

Bibliographic Reference(s)

10.1007-3-540-44448-3_42 — REKEY EXTERNAL
10.1007-3-540-44987-6_28 — CK01 EXTERNAL
10.1007-978-3-319-08506-7_8 — CLINIC EXTERNAL
10.1007-978-3-540-45146-4_24 — SIGMA EXTERNAL
10.1007-bf00124891 — DOW92 EXTERNAL
10.1007-bfb0055716 — Blei98 EXTERNAL
10.1109-csf.2016.19 — CCG16 EXTERNAL
10.1109-SP.2016.34 — FGSW16 EXTERNAL
10.1109-sp.2016.35 — CHSV16 EXTERNAL
10.1109-sp.2016.36 — LXZFH16 EXTERNAL
10.1109-sp.2016.37 — BBFGKZ16 EXTERNAL
10.1109-sp.2017.26 — BBK17 EXTERNAL
10.1109-tit.1976.1055638 — DH76 EXTERNAL
10.1145-359340.359342 — RSA EXTERNAL
10.1145-2810103.2813657 — XPROT EXTERNAL
10.1145-2976749.2978395 — CHECKOWAY EXTERNAL
10.1186-s13635-016-0030-7 — HCJC16 EXTERNAL
10.14722-ndss.2016.23418 — TRANSCRIPTION EXTERNAL
IETF.draft-hickman-netscape-ssl-00 — SSL2 EXTERNAL
NIST.fips.186-5 — DSS EXTERNAL
NIST.sp.800-186 — ECDP EXTERNAL
Boneh, D. and D. Brumley, "Remote Timing Attacks Are Practical", 12th USENIX Security Symposium (USENIX Security 03), 2003, <https://www.usenix.org/conference/12th-usenix-security-symposium/remote-timing-attacks-are-practical>. EXTERNAL
Badertscher, C., Matt, C., Maurer, U., Rogaway, P., and B. Tackmann, "Augmented Secure Channels and the Goal of the TLS 1.3 Record Layer", ProvSec 2015, September 2015, <https://eprint.iacr.org/2015/394>. EXTERNAL
Benjamin, D., "Additional TLS 1.3 results from Chrome", message to the TLS mailing list, 18 December 2017, <https://mailarchive.ietf.org/arch/msg/tls/i9blmvG2BEPf1s1OJkenHknRw9c/>. EXTERNAL
Fischlin, M. and F. Guenther, "Replay Attacks on Zero Round-Trip Time: The Case of the TLS 1.3 Handshake Candidates", Proceedings of Euro S&P 2017, April 2017, <https://eprint.iacr.org/2017/082>. EXTERNAL
Rescorla, E., "Preliminary data on Firefox TLS 1.3 Middlebox experiment", message to the TLS mailing list, 5 December 2017, <https://mailarchive.ietf.org/arch/msg/tls/RBp0X-OWNuWXugFJRV7c_hIU0dI/>. EXTERNAL
Krawczyk, H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme", Proceedings of CRYPTO 2010, 2010, <https://eprint.iacr.org/2010/264>. EXTERNAL
Patton, C. and T. Shrimpton, "Partially specified channels: The TLS 1.3 record layer without elision", 2018, <https://eprint.iacr.org/2018/634>. EXTERNAL
Drucker, N. and S. Gueron, "Selfie: reflections on TLS 1.3 with PSK", 2019, <https://eprint.iacr.org/2019/347>. EXTERNAL
Moustafa, M., Sethi, M., and T. Aura, "Misbinding Raw Public Keys to Identities in TLS", arxiv:2411.09770, 29 September 2025, <https://arxiv.org/pdf/2411.09770>. EXTERNAL
Cremers, C., Horvat, M., Hoyland, J., van der Merwe, T., and S. Scott, "Awkward Handshake: Possible mismatch of client/server view on client authentication in post-handshake mode in Revision 18", message to the TLS mailing list, 10 February 2017, <https://mailarchive.ietf.org/arch/msg/tls/crdSCgiW-94z2joulYJtuA52E9E/>. EXTERNAL
Dowling, B., Fischlin, M., Guenther, F., and D. Stebila, "A Cryptographic Analysis of the TLS 1.3 draft-10 Full and Pre-shared Key Handshake Protocol", TRON 2016, February 2016, <https://eprint.iacr.org/2016/081>. EXTERNAL
Luykx, A. and K. Paterson, "Limits on Authenticated Encryption Use in TLS", August 2017, <https://eprint.iacr.org/2024/051>. EXTERNAL
Hlauschek, C., Gruber, M., Fankhauser, F., and C. Schanes, "Prying Open Pandora's Box: KCI Attacks against TLS", Proceedings of USENIX Workshop on Offensive Technologies, 2015, <https://www.usenix.org/conference/woot15/workshop-program/presentation/hlauschek>. EXTERNAL
Krawczyk, H., "A Unilateral-to-Mutual Authentication Compiler for Key Exchange (with Applications to Client Authentication in TLS 1.3", Proceedings of ACM CCS 2016, October 2016, <https://eprint.iacr.org/2016/711>. EXTERNAL
MacCarthaigh, C., "Security Review of TLS1.3 0-RTT", May 2017, <https://github.com/tlswg/tls13-spec/issues/1001>. EXTERNAL
Krawczyk, H. and H. Wee, "The OPTLS Protocol and TLS 1.3", Proceedings of Euro S&P 2016, March 2016, <https://eprint.iacr.org/2015/978>. EXTERNAL
Benjamin, D., "Presentation before the TLS WG at IETF 100", IETF 100 Proceedings, November 2017, <https://datatracker.ietf.org/meeting/100/materials/slides-100-tls-sessa-tls13/>. EXTERNAL
Cremers, C., Horvat, M., van der Merwe, T., and S. Scott, "Revision 10: possible attack if client authentication is allowed during PSK", message to the TLS mailing list, 31 October 2015, <https://mailarchive.ietf.org/arch/msg/tls/TugB5ddJu3nYg7chcyeIyUqWSbA/>. EXTERNAL
Weimer, F., "Factoring RSA Keys With TLS Perfect Forward Secrecy", Red Hat Blog, 2 September 2015, <https://www.redhat.com/en/blog/factoring-rsa-keys-tls-perfect-forward-secrecy>. EXTERNAL
Dowling, B., Fischlin, M., Guenther, F., and D. Stebila, "A Cryptographic Analysis of the TLS 1.3 draft-10 Full and Pre-shared Key Handshake Protocol", Proceedings of ACM CCS 2015, October 2015, <https://eprint.iacr.org/2015/914>. EXTERNAL
Bellare, M. and B. Tackmann, "The Multi-User Security of Authenticated Encryption: AES-GCM in TLS 1.3", Proceedings of CRYPTO 2016, July 2016, <https://eprint.iacr.org/2016/564>. EXTERNAL
Weimer, F., "[SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator", message to the debian-security-announce mailing list, May 2008, <https://www.debian.org/security/2008/dsa-1571>. EXTERNAL
Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Kohlweiss, M., Pan, J., Protzenko, J., Rastogi, A., Swamy, N., Zanella-Beguelin, S., and J. Zinzindohoue, "Implementing and Proving the TLS 1.3 Record Layer", Proceedings of IEEE Symposium on Security and Privacy (San Jose) 2017, December 2016, <https://eprint.iacr.org/2016/1178>. EXTERNAL
Rescorla, E., "More compatibility measurement results", message to the TLS mailing list, 22 December 2017, <https://mailarchive.ietf.org/arch/msg/tls/6pGGT-wm5vSkacMFPEPvFMEnj-M/>. EXTERNAL
IETF RFC 2246 [Superseded*]
IETF RFC 3552 [Active*]
IETF RFC 4086 [Active*]
IETF RFC 4346 [Superseded*]
IETF RFC 4366 [Superseded*]
IETF RFC 4492 [Superseded*]
IETF RFC 5077 [Superseded*]
IETF RFC 5246 [Superseded*]
RFC5763 — RFC5763 EXTERNAL
IETF RFC 5764 [Active*]
IETF RFC 5929 [Active*]
IETF RFC 6091 [Active*]
IETF RFC 6101 [Active*]
IETF RFC 6176 [Active*]
IETF RFC 6520 [Active*]
IETF RFC 7250 [Active*]
IETF RFC 7465 [Active*]
IETF RFC 7568 [Active*]
IETF RFC 7624 [Active*]
IETF RFC 7685 [Active*]
IETF RFC 7924 [Active*]
IETF RFC 8305 [Active*]
IETF RFC 8422 [Superseded*]
IETF RFC 8446 [Superseded*]
IETF RFC 8447 [Active*]
RFC8448 — RFC8448 EXTERNAL
IETF RFC 8449 [Active*]
RFC8470 — RFC8470 EXTERNAL
RFC8773 — RFC8773 EXTERNAL
IETF RFC 8844 [Active*]
RFC8870 — RFC8870 EXTERNAL
IETF RFC 8879 [Active*]
RFC8937 — RFC8937 EXTERNAL
RFC9001 — QUIC-TLS EXTERNAL
IETF RFC 9112 [Active*]
IETF RFC 9147 [Active*]
IETF RFC 9149 [Active*]
IETF RFC 9162 [Active*]
RFC9257 — RFC9257 EXTERNAL
RFC9258 — RFC9258 EXTERNAL
RFC9261 — RFC9261 EXTERNAL
RFC9345 — RFC9345 EXTERNAL
IETF RFC 9525 [Active*]
IETF RFC 9847 [Active*]
RFC9849 — RFC9849 EXTERNAL
RFC9963 — RFC9963 EXTERNAL
T-REC-X.501.2020 — X501 EXTERNAL
WHATWG.FETCH — WHATWG, “Fetch,” Living Standard, Aug. 2023, Available: https://fetch.spec.whatwg.org/. EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9846.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9846, The Transport Layer Security (TLS) Protocol Version 1.3. Available at https://doi.org/10.17487/RFC9846

Snippet:

IETF RFC 9846, The Transport Layer Security (TLS) Protocol Version 1.3. Available at https://doi.org/10.17487/RFC9846

HTML (ISO 690 compliant)

Preview:

IETF RFC 9846, The Transport Layer Security (TLS) Protocol Version 1.3. Available at https://doi.org/10.17487/RFC9846

Snippet:

<span class="citation"><cite>IETF RFC 9846</cite>, The Transport Layer Security (TLS) Protocol Version 1.3. Available at <a href="https://doi.org/10.17487/RFC9846" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9846</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9846, The Transport Layer Security (TLS) Protocol Version 1.3
doi: 10.17487/RFC9846
url: https://doi.org/10.17487/RFC9846

Snippet:

<li>
<cite id="bib-rfc9846">IETF RFC 9846</cite>, The Transport Layer Security (TLS) Protocol Version 1.3
<span class="doi">10.17487/RFC9846</span>
</li>

Referenced By

IETF RFC 10003 [Active*]
IETF RFC 10015 [Active*]
IETF RFC 10016 [Active*]
IETF RFC 10035 [Active*]
IETF RFC 9918 [Active*]
IETF RFC 9919 [Active*]