Areas / Security

Security

TLS, PKI, authentication and cryptography.

1384 RFCs · 1384 with ISO Plain Language · 0 summaries · 0 index pages

With ISO Plain Language 1384

RFC 5280 X.509 Certificates Internet X.509 Public Key Infrastructure Certificate and CRL Profile The PKI framework that underpins digital trust on the Internet, defining the format for digital certificates used in TLS, code signing, and email security. RFC 7296 IKEv2 Internet Key Exchange Protocol Version 2 (IKEv2) How two machines prove who they are and agree on the keys that protect an IPsec tunnel. RFC 5652 CMS Cryptographic Message Syntax (CMS) The standard envelope for signing, sealing and authenticating data of any kind. RFC 4120 Kerberos V5 The Kerberos Network Authentication Service (V5) How you prove who you are to many servers while typing your password once and never sending it. RFC 2865 RADIUS Remote Authentication Dial In User Service (RADIUS) How a network access server asks one central database whether to let a user in, and on what terms. RFC 3711 SRTP The Secure Real-time Transport Protocol (SRTP) How voice and video calls get encrypted and tamper-proofed without making the packets much bigger. RFC 3414 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) How SNMPv3 proves who sent a management message, spots tampering and replays, and can hide the contents. RFC 4301 IPsec Architecture Security Architecture for the Internet Protocol The blueprint for IPsec: how security associations and three databases decide which IP packets get protected, dropped or passed through. RFC 3748 EAP Extensible Authentication Protocol (EAP) A flexible envelope that lets a network ask a device to prove who it is, using almost any authentication method. RFC 3971 SEND SEcure Neighbor Discovery (SEND) How to secure IPv6 Neighbor Discovery on a link without needing manual IPsec security associations. RFC 6749 OAuth 2.0 The OAuth 2.0 Authorization Framework The authorization framework that powers "Sign in with Google/GitHub/Facebook" and API access delegation across the modern web. RFC 3279 Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile The identifiers and encodings X.509 certificates use for public keys and signatures. RFC 9052 COSE CBOR Object Signing and Encryption (COSE): Structures and Process The CBOR structures and processing steps for signatures, message authentication, encryption, and keys. RFC 6066 TLS Extensions Transport Layer Security (TLS) Extensions: Extension Definitions Six optional add-ons that let a TLS client tell a server which site it wants, and ask for less work on small devices. RFC 2104 HMAC HMAC: Keyed-Hashing for Message Authentication How to turn any standard hash function into a keyed integrity check that only key holders can produce. RFC 7519 JWT JSON Web Token (JWT) A compact, URL-safe token format for securely transmitting claims between parties. RFC 4121 Kerberos GSS-API v2 The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2 How Kerberos protects GSS-API messages with token formats tied to the negotiated key. RFC 2827 Ingress filtering Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing How network providers can stop packets with forged source addresses at the network edge. RFC 9325 TLS/DTLS Best Practices Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) A best-practice guide to protocol versions, authentication, cipher choices, and key handling for TLS and DTLS. RFC 2743 GSS-API v2 update 1 Generic Security Service Application Program Interface Version 2, Update 1 One interface for applications to establish authenticated peers and protect messages with different security mechanisms. RFC 1321 MD5 The MD5 Message-Digest Algorithm The 128-bit fingerprint algorithm that turns a message of any length into a short digest. RFC 5912 PKIX ASN.1 modules New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX) The PKIX certificate formats rewritten in the 2002 version of ASN.1, with identical bits on the wire. RFC 3370 CMS algorithms Cryptographic Message Syntax (CMS) Algorithms The algorithm identifiers and parameter rules CMS implementations use to exchange protected messages. RFC 4250 SSH numbers The Secure Shell (SSH) Protocol Assigned Numbers The initial registries and assignment rules for numbers and names used by the SSH protocol. RFC 4086 Randomness for Security Randomness Requirements for Security Why a secret key is only as strong as the dice that rolled it. RFC 3972 CGA Cryptographically Generated Addresses (CGA) IPv6 addresses whose interface identifier is derived from a public key and related parameters. RFC 3704 BCP 84 Ingress Filtering for Multihomed Networks How networks can filter forged source addresses without breaking multihomed connections. RFC 6750 OAuth 2.0 Bearer Tokens The OAuth 2.0 Authorization Framework: Bearer Token Usage How a client shows an OAuth access token to an API, and what the API says when the token is wrong. RFC 5705 TLS Exporters Keying Material Exporters for Transport Layer Security (TLS) How an application derives its own keying material from an established TLS session. RFC 5764 DTLS-SRTP Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP) DTLS negotiates the keys; SRTP protects the real-time media packets. RFC 4556 PKINIT Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) PKINIT uses public-key credentials for the initial Kerberos authentication exchange. RFC 4303 IPsec ESP IP Encapsulating Security Payload (ESP) ESP protects IP traffic with encryption, integrity checks and replay detection. RFC 3830 MIKEY MIKEY: Multimedia Internet KEYing A key-management protocol for setting up protected real-time media sessions. RFC 7030 EST Enrollment over Secure Transport EST enrolls PKI clients for certificates through authenticated HTTPS requests. RFC 7481 RDAP security Security Services for the Registration Data Access Protocol (RDAP) RDAP uses HTTP and TLS services to control access and protect registration lookups. RFC 6960 OCSP X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP A signed request-and-response protocol for checking the status of a digital certificate. RFC 5216 EAP-TLS The EAP-TLS Authentication Protocol How EAP carries a TLS certificate exchange so a device and network can authenticate each other and derive keys. RFC 4252 SSH Authentication The Secure Shell (SSH) Authentication Protocol How an SSH server decides who you are, once the encrypted tunnel is up. RFC 1994 PPP CHAP PPP Challenge Handshake Authentication Protocol (CHAP) How a PPP link checks a peer with a changing challenge instead of sending its secret. RFC 4279 TLS-PSK Pre-Shared Key Ciphersuites for Transport Layer Security (TLS) Three TLS ciphersuite families that use a key the parties share in advance. RFC 9147 DTLS 1.3 The Datagram Transport Layer Security (DTLS) Protocol Version 1.3 TLS 1.3 security adapted to transports that can lose, reorder, or duplicate datagrams. RFC 8253 PCEPS PCEPS: Usage of TLS to Provide a Secure Transport for the Path Computation Element Communication Protocol (PCEP) How PCEP peers establish TLS on their existing TCP connection before exchanging PCEP messages. RFC 3174 SHA-1 US Secure Hash Algorithm 1 (SHA1) The SHA-1 hash algorithm written out for the Internet community, with reference C code. RFC 1964 Kerberos 5 GSS-API The Kerberos Version 5 GSS-API Mechanism How GSS-API peers use Kerberos version 5 tokens, names, and credentials. RFC 4072 Diameter EAP Diameter Extensible Authentication Protocol (EAP) Application How a Network Access Server relays EAP authentication to a back-end Diameter server. RFC 2747 RSVP Cryptographic Authentication How RSVP neighbors authenticate messages and detect modified or replayed reservations. RFC 5176 RADIUS CoA/DM Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS) How an authentication server can kick a user offline or change what a user is allowed to do, without waiting for the access device to ask. RFC 8224 SIP Identity Authenticated Identity Management in the Session Initiation Protocol (SIP) How SIP requests carry a signed assertion of caller identity that another service can verify. RFC 3961 Kerberos 5 Crypto Encryption and Checksum Specifications for Kerberos 5 A framework for defining the encryption and checksum mechanisms used by Kerberos 5. RFC 5480 ECC public key info Elliptic Curve Cryptography Subject Public Key Information How elliptic-curve public keys and their named curves are encoded in X.509 certificates. RFC 6158 RADIUS Guidelines RADIUS Design Guidelines Guidelines for designing RADIUS attributes that work with existing implementations. RFC 3579 RADIUS EAP RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP) How a network access server can pass any EAP login method to a RADIUS server without understanding it. RFC 4513 LDAP authentication Lightweight Directory Access Protocol (LDAP): Authentication Methods and Security Mechanisms How LDAP checks identity and protects a session with StartTLS, simple Bind or SASL. RFC 2986 PKCS #10 PKCS #10: Certification Request Syntax Specification Version 1.7 The standard form for asking a certificate authority to turn your public key into a certificate. RFC 2289 OTP A One-Time Password System A one-time password sequence designed to make captured login codes unusable for replay. RFC 2744 GSS-API C bindings Generic Security Service API Version 2 : C-bindings The C types, functions, and status codes for the Generic Security Service API. RFC 8551 S/MIME 4.0 Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Message Specification Specifies MIME message formats and algorithms for signing, encrypting, and compressing content. RFC 5920 MPLS security framework Security Framework for MPLS and GMPLS Networks A catalogue of the ways MPLS and GMPLS networks can be attacked, and the defenses providers can choose from. RFC 8018 PKCS #5: Password-Based Cryptography Specification Version 2.1 How to turn a short password into a strong key, and use it for encryption and message authentication. RFC 9846 TLS 1.3 The Transport Layer Security (TLS) Protocol Version 1.3 How two programs agree on secret keys, prove who they are, and then talk privately over an open network. RFC 3723 Securing IP Storage Securing Block Storage Protocols over IP Security requirements for storage and discovery protocols that carry block data over IP. RFC 7301 TLS ALPN Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension Negotiates the application protocol during the TLS handshake without adding network round-trips. RFC 4211 CRMF Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF) The message structure for requesting an X.509 certificate and demonstrating control of its key. RFC 7935 RPKI Algorithms The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure The required signature algorithms, key size and formats for RPKI objects. RFC 2203 RPCSEC_GSS RPCSEC_GSS Protocol Specification A security flavor that lets ONC RPC use GSS-API mechanisms to authenticate and protect calls. RFC 3161 TSP Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) A signed token proves that a data fingerprint existed before a stated time. RFC 7518 JWA JSON Web Algorithms (JWA) The named cryptographic algorithms and key formats for JSON Web Signature, Encryption and Key. RFC 5288 AES-GCM for TLS AES Galois Counter Mode (GCM) Cipher Suites for TLS Twelve TLS 1.2 cipher suites that use AES-GCM for encryption and authentication. RFC 4055 RSA-PSS/OAEP in X.509 Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile How X.509 certificates identify RSA-PSS signatures, RSA-OAEP keys and SHA-2 algorithms. RFC 4302 IPsec AH IP Authentication Header Add integrity checks and optional replay protection to IP packets. RFC 7644 SCIM Protocol System for Cross-domain Identity Management: Protocol HTTP operations for creating, finding, changing, and deleting identity resources. RFC 3118 DHCP Auth Authentication for DHCP Messages A DHCP option for checking who sent a message and whether its contents changed. RFC 5191 PANA Protocol for Carrying Authentication for Network Access (PANA) A UDP-based transport for EAP authentication between a client and an access network. RFC 5247 EAP Key Management Extensible Authentication Protocol (EAP) Key Management Framework How EAP keys are named, delivered to network layers and managed securely. RFC 4422 SASL Simple Authentication and Security Layer (SASL) A reusable framework for authentication and optional data protection in connection-based protocols. RFC 7515 JWS JSON Web Signature (JWS) A JSON-based format for protecting content with a digital signature or message authentication code. RFC 4851 EAP-FAST The Flexible Authentication via Secure Tunneling Extensible Authentication Protocol Method (EAP-FAST) An EAP method that builds a TLS tunnel first, then authenticates the user safely inside it. RFC 5281 EAP-TTLSv0 Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0) A TLS tunnel for network login, so old password protocols can be used without exposing them to eavesdroppers. RFC 5802 SCRAM Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms A challenge-response login that proves password knowledge and can authenticate both client and server. RFC 7643 SCIM Core Schema System for Cross-domain Identity Management: Core Schema A shared JSON schema for identities that can be exchanged between organizations and services. RFC 4254 SSH Connection The Secure Shell (SSH) Connection Protocol How one encrypted SSH connection carries shells, commands and tunnels at the same time. RFC 4732 DoS considerations Internet Denial-of-Service Considerations A survey of how Internet systems can be knocked out by overload, and which defenses help or backfire. RFC 5116 AEAD An Interface and Algorithms for Authenticated Encryption A common interface for encryption that also checks data integrity and authenticity. RFC 6614 RADIUS over TLS Transport Layer Security (TLS) Encryption for RADIUS Running RADIUS authentication over TLS on TCP so roaming traffic is encrypted and peers check certificates instead of shared secrets. RFC 8226 STIR Certificates Secure Telephone Identity Credentials: Certificates How X.509 certificates can assert which telephone numbers a caller is authorized to use. RFC 6234 SHA-256/384/512 US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF) Complete reference implementations for the SHA family of hash functions, together with HMAC and HKDF, in C. RFC 3162 RADIUS IPv6 RADIUS and IPv6 RADIUS attributes carry IPv6 addresses, prefixes, routes, and related access settings. RFC 4187 EAP-AKA Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA) How the mobile phone world's AKA challenge-response authentication is carried inside the Extensible Authentication Protocol. RFC 3779 X.509 Extensions for IP Addresses and AS Identifiers Certificate extensions that record which IP address blocks and autonomous system numbers a key holder may use. RFC 3776 MIPv6 IPsec Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents Required packet formats and processing rules for protecting Mobile IPv6 signaling with IPsec. RFC 4107 Key Mgmt Guidelines Guidelines for Cryptographic Key Management When protocol designers should use automated key management and when manual keys may be justified. RFC 5042 DDP/RDMAP Security Direct Data Placement Protocol (DDP) / Remote Direct Memory Access Protocol (RDMAP) Security A security analysis of RDMA network resources, peer attacks and required countermeasures. RFC 5763 DTLS-SRTP Framework Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS) How SIP endpoints bind a DTLS media handshake to the fingerprints carried in SDP. RFC 6105 RA Guard IPv6 Router Advertisement Guard A layer-2 switch can filter IPv6 router announcements before they reach hosts. RFC 4462 GSS-API for SSH Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol Adds GSS-API methods for SSH key exchange and user authentication. RFC 4642 NNTP over TLS Using Transport Layer Security (TLS) with Network News Transfer Protocol (NNTP) How an NNTP client upgrades a connection to TLS with the STARTTLS command. RFC 4680 TLS supplemental data TLS Handshake Message for Supplemental Data Defines a TLS handshake message for application data negotiated by the client and server. RFC 7292 PKCS #12 PKCS #12: Personal Information Exchange Syntax v1.1 A portable container for moving keys, certificates, and related identity data. RFC 5425 Syslog over TLS Transport Layer Security (TLS) Transport Mapping for Syslog How syslog uses TLS to protect messages while they travel between systems. RFC 5801 GS2 Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family Connects GSS-API authentication mechanisms to SASL with negotiable channel binding. RFC 5929 TLS channel bindings Channel Bindings for TLS Three ways for an application to bind authentication to the TLS connection carrying it. RFC 8308 SSH ext-info Extension Negotiation in the Secure Shell (SSH) Protocol A confidential way for SSH clients and servers to exchange supported protocol extensions. RFC 3275 XML-DSig (Extensible Markup Language) XML-Signature Syntax and Processing XML syntax and processing rules for signing referenced data and checking its digests. RFC 5958 Asymmetric Key Packages Asymmetric Key Packages A standard ASN.1 structure for carrying private keys and related information. RFC 5869 HKDF HMAC-based Extract-and-Expand Key Derivation Function (HKDF) A two-step recipe that turns one source of secret key material into as many strong keys as a protocol needs. RFC 3962 Kerberos AES Advanced Encryption Standard (AES) Encryption for Kerberos 5 AES encryption and checksums for Kerberos 5, with keys derived from pass phrases. RFC 4616 SASL PLAIN The PLAIN Simple Authentication and Security Layer (SASL) Mechanism A single-message username and password mechanism for SASL that needs protection from another layer. RFC 3580 802.1X RADIUS IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines How an 802.1X switch or access point uses RADIUS for authentication and accounting. RFC 5448 EAP-AKA' Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA') EAP-AKA' binds derived keys to an access-network name and uses SHA-256. RFC 5911 CMS ASN.1 modules New ASN.1 Modules for Cryptographic Message Syntax (CMS) and S/MIME CMS and S/MIME use the 2002 ASN.1 notation without changing their encoded messages. RFC 6819 OAuth Threat Model OAuth 2.0 Threat Model and Security Considerations A map of OAuth 2.0 attacks and the countermeasures the RFC recommends. RFC 9053 COSE Algorithms CBOR Object Signing and Encryption (COSE): Initial Algorithms The initial signature, authentication, encryption, and key-management algorithms for COSE. RFC 8017 PKCS#1 v2.2 PKCS #1: RSA Cryptography Specifications Version 2.2 RSA key formats, encryption and signature schemes, and the rules that connect them. RFC 3749 TLS compression Transport Layer Security Protocol Compression Methods Adds a standardized DEFLATE compression method to TLS and defines identifier-allocation rules. RFC 4785 Pre-Shared Key (PSK) Ciphersuites with NULL Encryption for Transport Layer Security (TLS) Adds TLS cipher suites that authenticate and protect message integrity without encryption. RFC 7589 NETCONF over TLS Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication How NETCONF management sessions use TLS and mutual X.509 certificates to authenticate both peers. RFC 8221 ESP/AH Crypto Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH) Implementation requirements and guidance for IPsec ESP and AH cryptographic algorithms. RFC 5083 CMS AuthEnveloped Cryptographic Message Syntax (CMS) Authenticated-Enveloped-Data Content Type A CMS content type that encrypts content and authenticates it in one operation. RFC 7146 Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3 Updated IPsec requirements for iSCSI and other block-storage protocols, including newer algorithms. RFC 7517 JWK JSON Web Key (JWK) A JSON format for describing cryptographic keys and sets of keys used by JOSE protocols. RFC 8032 EdDSA Edwards-Curve Digital Signature Algorithm (EdDSA) Two Edwards-curve signature schemes with fixed parameters, implementation guidance, and test vectors. RFC 9190 EAP-TLS 1.3 EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3 EAP-TLS uses the TLS 1.3 handshake for certificate-based network access. RFC 3394 AES Key Wrap Advanced Encryption Standard (AES) Key Wrap Algorithm How to wrap key data with AES and check its integrity when it is unwrapped. RFC 3602 AES-CBC for IPsec The AES-CBC Cipher Algorithm and Its Use with IPsec How to use AES in CBC mode, with a fresh random IV in every packet, to encrypt IPsec ESP traffic. RFC 5056 Channel Bindings On the Use of Channel Bindings to Secure Channels Channel binding connects application authentication to a lower secure channel. RFC 7465 Prohibiting RC4 Cipher Suites Prohibit TLS clients and servers from negotiating RC4 cipher suites. RFC 8392 CWT CBOR Web Token (CWT) A compact, binary token for constrained devices, using CBOR claims protected by COSE instead of JSON. RFC 8410 Ed25519 in X.509 Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure Defines X.509 identifiers and encodings for Ed25519, Ed448, X25519 and X448. RFC 8555 ACME Automatic Certificate Management Environment (ACME) The protocol behind Let's Encrypt that automated certificate issuance and renewal, bringing free HTTPS to the entire web. RFC 8573 NTP MAC Message Authentication Code for the Network Time Protocol Deprecates MD5-based NTP authentication and recommends AES-CMAC instead. RFC 9338 COSE Countersignatures CBOR Object Signing and Encryption (COSE): Countersignatures A corrected COSE method for adding a second signature to signed, encrypted or MAC-protected data. RFC 7343 ORCHIDv2 An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers Version 2 (ORCHIDv2) An IPv6-shaped identifier format that binds a cryptographic hash to an endpoint identity and usage context. RFC 8247 IKEv2 Algorithms Algorithm Implementation Requirements and Usage Guidance for the Internet Key Exchange Protocol Version 2 (IKEv2) Which cryptographic algorithms an IKEv2 implementation has to have, and which it should drop. RFC 1858 IP Fragment Filtering Security Considerations for IP Fragment Filtering How tiny and overlapping IP fragments can bypass packet filters, and how the memo proposes blocking them. RFC 3526 MODP DH Groups More Modular Exponential (MODP) Diffie-Hellman Groups for IKE Six named prime groups for the Diffie-Hellman operation used by IKE. RFC 3948 UDP Encapsulation of ESP UDP Encapsulation of IPsec ESP Packets A packet format for carrying IPsec ESP inside UDP so it can cross Network Address Translators. RFC 4106 AES-GCM in ESP The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP) How IPsec ESP can encrypt and authenticate a packet in one pass, at 10 gigabits per second and above. RFC 5906 NTP Autokey Network Time Protocol Version 4: Autokey Specification How NTP servers authenticate to clients while limiting per-packet cryptographic work. RFC 6454 Web Origin The Web Origin Concept What a web origin is, how a browser works out the origin of an address, and the Origin header that reports it. RFC 6929 RADIUS Extensions Remote Authentication Dial In User Service (RADIUS) Protocol Extensions Extends RADIUS with more attribute types, nested groups, and a way to carry data larger than one attribute. RFC 7516 JWE JSON Web Encryption (JWE) Encrypts a message into a JSON object, with a protected header, a wrapped content key and an authentication tag. RFC 7970 IODEF v2 The Incident Object Description Exchange Format Version 2 A structured XML format for sharing security incident reports, response requests and threat indicators. RFC 4962 AAA Key Management Guidance for Authentication, Authorization, and Accounting (AAA) Key Management Design requirements for protocols that distribute keys through authentication, authorization, and accounting systems. RFC 7748 Curve25519 and Curve448 Elliptic Curves for Security Two elliptic curves with specified key-agreement functions and a reproducible generation process. RFC 8725 JWT best practices JSON Web Token Best Current Practices The rules for checking a JWT before you trust it, written after a series of real attacks on JWT deployments. RFC 8613 OSCORE Object Security for Constrained RESTful Environments (OSCORE) Application-layer encryption for CoAP that stays intact end to end, even when proxies sit in the middle. RFC 4949 Security Glossary Internet Security Glossary, Version 2 A guide to consistent security vocabulary in Internet documents, with definitions and advice on when to use each term. RFC 4217 FTP over TLS Securing FTP with TLS How FTP clients and servers use TLS to protect the control session and, separately, file transfers. RFC 4419 SSH DH Group Exchange Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol An SSH key exchange lets the server select a Diffie-Hellman group that fits the client's size request. RFC 5289 ECC GCM Cipher Suites TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode (GCM) Sixteen TLS cipher suites combine elliptic-curve key exchange with SHA-256, SHA-384 or AES-GCM. RFC 5403 RPCSEC_GSS v2 RPCSEC_GSS Version 2 Adds channel bindings to RPCSEC_GSS so an RPC caller can prove it is on the same secure path as the server. RFC 5487 PSK TLS GCM suites Pre-Shared Key Cipher Suites for TLS with SHA-256/384 and AES Galois Counter Mode New TLS pre-shared-key suites use AES-GCM or replace SHA-1 with SHA-256 or SHA-384. RFC 6520 TLS Heartbeat Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension A TLS and DTLS message for checking whether a peer is reachable and probing the path MTU. RFC 9202 Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE) How a tiny device and a client use DTLS and access tokens to decide who may access what. RFC 9427 EAP Types for TLS 1.3 TLS-Based Extensible Authentication Protocol (EAP) Types for Use with TLS 1.3 How EAP methods built on TLS, such as TEAP, EAP-FAST, EAP-TTLS and PEAP, move to TLS 1.3. RFC 4111 PPVPN Security Security Framework for Provider-Provisioned Virtual Private Networks (PPVPNs) Threats, defenses, and evaluation questions for provider-provisioned virtual private networks. RFC 5746 TLS Renegotiation Transport Layer Security (TLS) Renegotiation Indication Extension A TLS extension that ties each renegotiation to the connection it happened on, closing a splicing attack. RFC 8414 OAuth AS metadata OAuth 2.0 Authorization Server Metadata A standard way for a client to discover how to talk to an authorization server. RFC 3756 ND trust models IPv6 Neighbor Discovery (ND) Trust Models and Threats Three network trust settings and the attacks a secure IPv6 Neighbor Discovery design must address. RFC 7435 Opportunistic Security Opportunistic Security: Some Protection Most of the Time Use encryption when peers support it, and authenticate them when reliable identity information is available. RFC 10002 CMC Certificate Management over CMS (CMC) A message format for asking a certificate authority to issue a certificate. RFC 10003 CMC transport Certificate Management over CMS (CMC): Transport Protocols Four ways to carry a certificate request between a client and a certificate authority. RFC 5755 Attribute Cert Profile An Internet Attribute Certificate Profile for Authorization A common shape for the certificates that say who may do what, and where. RFC 7542 NAI The Network Access Identifier The user@realm format for identifying who is asking for network access, so requests can be routed to the right home domain. RFC 2631 DH Key Agreement Diffie-Hellman Key Agreement Method How two parties use Diffie-Hellman to agree on a secret over an open channel, and turn it into usable keys. RFC 8827 WebRTC security arch WebRTC Security Architecture How a browser call is kept private, and who is trusted to say who is calling. RFC 3766 Key Strength Matching Determining Strengths For Public Keys Used For Exchanging Symmetric Keys How to pick an RSA or Diffie-Hellman key size that matches the symmetric key it protects. RFC 6090 ECC Algorithms Fundamental Elliptic Curve Cryptography Algorithms A detailed reference for basic elliptic-curve key exchange and ElGamal-style signatures. RFC 6151 MD5 Security Update Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms Updated guidance says where MD5 is no longer acceptable and why new designs should avoid HMAC-MD5. RFC 2315 PKCS #7 v1.5 PKCS #7: Cryptographic Message Syntax Version 1.5 A general ASN.1 syntax for packaging data with signatures, digests, certificates, and encryption. RFC 3565 AES in CMS Use of the Advanced Encryption Standard (AES) Encryption Algorithm in Cryptographic Message Syntax (CMS) How to use AES to encrypt message content in the Cryptographic Message Syntax, and how the content key is wrapped for each recipient. RFC 4555 MOBIKE IKEv2 Mobility and Multihoming Protocol (MOBIKE) Lets a VPN tunnel keep running when the client's IP address changes. RFC 4568 SDP Security (SDES) Session Description Protocol (SDP) Security Descriptions for Media Streams How the key for an encrypted media stream is put into the session description, so both sides can set up SRTP in one exchange. RFC 4868 HMAC-SHA-2 for IPsec Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec Using the SHA-2 hash family to authenticate and protect IPsec traffic. RFC 5080 RADIUS Issues Common Remote Authentication Dial In User Service (RADIUS) Implementation Issues and Suggested Fixes Common RADIUS implementation problems and the fixes the IETF settled on. RFC 5091 IBCS #1 Identity-Based Cryptography Standard (IBCS) #1: Supersingular Curve Implementations of the BF and BB1 Cryptosystems How identity-based encryption uses a recipient's identity to derive a public key. RFC 7662 OAuth Introspection OAuth 2.0 Token Introspection Lets a protected resource ask the authorization server what a token means. RFC 6545 RID Real-time Inter-network Defense (RID) How the teams that run networks ask each other to help trace and stop an attack. RFC 9132 DOTS Signal Channel Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification How a network under attack asks a provider to filter the traffic aimed at it. RFC 9930 TEAP v1 Tunnel Extensible Authentication Protocol (TEAP) Version 1 A standards-track EAP method that builds a TLS tunnel, then runs password, certificate or other logins inside it. RFC 4563 MIKEY Key ID type The Key ID Information Type for the General Extension Payload in Multimedia Internet KEYing (MIKEY) Telling receivers which kind of key a MIKEY message carries, and which key it is. RFC 7268 RADIUS for IEEE 802 RADIUS Attributes for IEEE 802 Networks New RADIUS attributes that let Wi-Fi and wired access points tell a central server more and get more back. RFC 7454 BGP OPSEC BGP Operations and Security The operator's checklist for keeping BGP sessions, routes and routers from being abused. RFC 7677 SCRAM-SHA-256 SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms A short RFC that adds SHA-256 versions of the SCRAM password login and tightens the rules for using channel binding safely. RFC 8037 CFRG Curves in JOSE CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE) How JOSE carries the modern X25519, X448, Ed25519 and Ed448 algorithms: one new key type and one new signature name. RFC 9048 EAP-AKA' Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA') How a phone or device proves its identity to a mobile network over EAP, with the session keys tied to the access network's name. RFC 9146 DTLS Connection ID Connection Identifier for DTLS 1.2 A connection identifier in the DTLS 1.2 record header, so a session survives a change of IP address or port. RFC 2404 HMAC-SHA-1-96 The Use of HMAC-SHA-1-96 within ESP and AH How IPsec's ESP and AH use HMAC with SHA-1, cut to 96 bits, to prove a packet is genuine and unchanged. RFC 5656 ECC in SSH Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer How SSH adopted elliptic curve key exchange and signatures: ECDH, ECMQV and ECDSA. RFC 5723 IKEv2 Resumption Internet Key Exchange Protocol Version 2 (IKEv2) Session Resumption Letting a VPN client pick up a dropped session where it left off, without starting the whole handshake again. RFC 7250 Raw Public Keys in TLS Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Let TLS and DTLS peers authenticate with a bare public key instead of a full certificate. RFC 7591 OAuth Dynamic Registration OAuth 2.0 Dynamic Client Registration Protocol How an OAuth 2.0 client asks an authorization server for its client identifier and details. RFC 5246 TLS 1.2 The Transport Layer Security (TLS) Protocol Version 1.2 The cryptographic protocol that secured the internet for a decade, providing privacy and data integrity between applications. RFC 2941 Telnet Authentication Telnet Authentication Option How a Telnet client and server agree on a way to prove identity, switch on encryption and pass credentials along. RFC 8265 PRECIS Credentials Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords How to handle usernames and passwords that contain letters and symbols from every script. RFC 7384 Security Requirements of Time Protocols in Packet Switched Networks Requirements for protecting NTP and PTP time exchanges from tampering. RFC 10004 CMC compliance Certificate Management over CMS (CMC): Compliance Requirements The rules a Certificate Management over CMS implementation has to follow to be conformant. RFC 1928 SOCKS5 SOCKS Protocol Version 5 A general framework that lets TCP and UDP applications pass through a firewall via a SOCKS server, with pluggable authentication. RFC 3947 IKE NAT-Traversal Negotiation of NAT-Traversal in the IKE How two IPsec peers notice a NAT in the way and agree to send their traffic through it. RFC 5295 EMSK Root Keys Specification for the Derivation of Root Keys from an Extended Master Session Key (EMSK) Turning the master key from a network login into separate keys for separate uses. RFC 5754 Using SHA2 Algorithms with Cryptographic Message Syntax How the SHA-2 hash functions are named and encoded when they are used inside signed and encrypted email. RFC 5914 Trust Anchor Format Trust Anchor Format A standard, compact record of a trust anchor: its public key plus limits on what it is trusted to vouch for. RFC 7638 JWK Thumbprint JSON Web Key (JWK) Thumbprint A recipe for turning a JSON Web Key into a short, repeatable hash that names the key. RFC 8044 RADIUS Data Types Data Types in RADIUS A shared, IANA-managed list of the data types that RADIUS attributes carry, written down after two decades of unwritten practice. RFC 9849 TLS Encrypted Client Hello TLS Encrypted Client Hello How a browser hides which website it is asking for, even from the network that carries the bytes. RFC 9965 eap.arpa The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning A reserved name that lets a device with no credentials ask a network for limited access, so that it can be provisioned. RFC 7182 MANET ICV TLVs Integrity Check Value and Timestamp TLV Definitions for Mobile Ad Hoc Networks (MANETs) How a mobile ad hoc network carries a tamper check and a timestamp inside its routing packets and messages. RFC 9838 IKEv2 GKM Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2) An extension to IKEv2 that hands a shared encryption key to a group of devices and replaces it later. RFC 2196 Site Security Handbook Site Security Handbook A framework for site security policy, technical protections, and incident response. RFC 3647 PKI CP/CPS Framework Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework A framework of topics for certificate policies and certification practice statements. RFC 5753 ECC in CMS Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) How CMS messages use elliptic-curve signatures and key agreement. RFC 5878 TLS Authorization Transport Layer Security (TLS) Authorization Extensions TLS handshake extensions for exchanging authorization information. RFC 1968 PPP ECP The PPP Encryption Control Protocol (ECP) How the two ends of a PPP link agree to encrypt their traffic, and which cipher to use. RFC 2945 SRP The SRP Authentication and Key Exchange System Password authentication that never sends the password, and produces a shared key in the same exchange. RFC 3686 AES-CTR ESP Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP) How to encrypt IPsec packets with AES in counter mode, and the traps that make it unsafe if misused. RFC 3826 AES for SNMP USM The Advanced Encryption Standard (AES) Cipher Algorithm in the SNMP User-based Security Model How SNMPv3 encrypts the management information in a message with AES, and how the key and the starting vector are derived. RFC 5055 SCVP Server-Based Certificate Validation Protocol (SCVP) A protocol that lets a server carry out certificate path building and validation on behalf of a client. RFC 5084 AES-CCM/GCM in CMS Using AES-CCM and AES-GCM Authenticated Encryption in the Cryptographic Message Syntax (CMS) How to plug the AES-CCM and AES-GCM authenticated encryption modes into CMS authenticated-enveloped data. RFC 7636 PKCE Proof Key for Code Exchange by OAuth Public Clients A one-time secret that stops a stolen OAuth authorization code from being redeemed by an attacker. RFC 8783 DOTS data channel Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification How a DDoS victim sends long-lived configuration, such as aliases and filtering rules, to its mitigation provider over RESTCONF. RFC 8826 WebRTC security threats Security Considerations for WebRTC What can go wrong when a web page is allowed to place calls from your browser, and what has to be true to keep it safe. RFC 9200 ACE-OAuth Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth) OAuth 2.0 reshaped for tiny devices: CoAP, CBOR and proof-of-possession tokens instead of bearer tokens over HTTPS. RFC 9640 YANG crypto types YANG Data Types and Groupings for Cryptography A shared YANG vocabulary for configuring passwords, keys and certificates over NETCONF and RESTCONF. RFC 3610 AES-CCM Counter with CBC-MAC (CCM) CCM combines encryption and authentication for 128-bit block ciphers, with a nonce that must never repeat under one key. RFC 4270 Attacks on Cryptographic Hashes in Internet Protocols How collision attacks on MD5 and SHA-1 affect different uses of hashes in Internet protocols. RFC 4523 LDAP X.509 schema Lightweight Directory Access Protocol (LDAP) Schema Definitions for X.509 Certificates How LDAP directories store and search X.509 certificates, revocation lists and related security data. RFC 4819 SSH Public Key Subsystem Secure Shell Public Key Subsystem A small SSH subsystem that lets a logged-in user add, remove and list their own public keys on a server. RFC 5959 Asymmetric key packages Algorithms for Asymmetric Key Package Content Type Which cryptographic algorithms to use when protecting private keys and key packages with CMS. RFC 6033 CMS Key Package Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type Which encryption, key management and signature algorithms to support when protecting cryptographic keys in CMS. RFC 6176 Prohibit SSL 2.0 Prohibiting Secure Sockets Layer (SSL) Version 2.0 Requires TLS clients and servers never to negotiate the insecure SSL version 2.0. RFC 6655 AES-CCM for TLS AES-CCM Cipher Suites for Transport Layer Security (TLS) Sixteen TLS cipher suites that use AES in CCM mode, built for small devices. RFC 6986 GOST R 34.11-2012 GOST R 34.11-2012: Hash Function The Russian GOST R 34.11-2012 hash algorithm and its two output lengths. RFC 7696 Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms How to design protocols so that aging cryptography can be swapped out, and how to pick the algorithms every implementation must support. RFC 9140 EAP-NOOB Nimble Out-of-Band Authentication for EAP (EAP-NOOB) How a gadget with no credentials joins a network: swap keys over the air, then confirm them with a one-way message a person carries. RFC 9580 OpenPGP OpenPGP The message, key and signature formats behind PGP-style encryption, now with version 6 keys, modern curves and authenticated encryption. RFC 6696 ERP Extensions EAP Extensions for the EAP Re-authentication Protocol (ERP) A one-round-trip way to re-authenticate with EAP when moving between access points, without repeating the full login. RFC 3097 RSVP Cryptographic Authentication -- Updated Message Type Value Renumbers two RSVP Integrity messages to resolve a conflict with the Bundle message. RFC 3788 SIGTRAN security Security Considerations for Signaling Transport (SIGTRAN) Protocols Which security the signaling-over-IP protocols must support: IPsec is mandatory, TLS is optional. RFC 4716 SSH public key format The Secure Shell (SSH) Public Key File Format A text-file format for exchanging SSH public keys and displaying their fingerprints. RFC 5035 ESS CertID Agility Enhanced Security Services (ESS) Update: Adding CertID Algorithm Agility Letting an S/MIME signature name the hash that identifies the signing certificate. RFC 5931 EAP-pwd Extensible Authentication Protocol (EAP) Authentication Using Only a Password An EAP password exchange designed to limit offline guessing from captured traffic. RFC 6043 MIKEY-TICKET MIKEY-TICKET: Ticket-Based Modes of Key Distribution in Multimedia Internet KEYing (MIKEY) Ticket-based MIKEY modes let a central service distribute media-session keys. RFC 6562 VBR Audio with SRTP Guidelines for the Use of Variable Bit Rate Audio with Secure RTP Why the sizes of encrypted speech packets leak what was said, and how to make the leak too small to use. RFC 6904 SRTP Header Ext. Enc. Encryption of Header Extensions in the Secure Real-time Transport Protocol (SRTP) A way to encrypt chosen RTP header extensions inside SRTP, using the same cipher as the media payload. RFC 9810 CMP Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP) How a client system asks a certificate authority for certificates, and how the authority checks the request. RFC 4082 TESLA Introduction Timed Efficient Stream Loss-Tolerant Authentication (TESLA): Multicast Source Authentication Transform Introduction A multicast authentication method that delays disclosure of packet keys so receivers can verify each message. RFC 6194 SHA-1 security Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms A review of published attacks on SHA-0 and SHA-1 and their implications for protocol designers. RFC 6979 Deterministic DSA Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA) A deterministic way to generate DSA and ECDSA signatures without signing-time randomness. RFC 7201 Securing RTP Options for Securing RTP Sessions A survey of RTP security mechanisms and the application requirements that guide their choice. RFC 5410 MIKEY OMA BCAST Multimedia Internet KEYing (MIKEY) General Extension Payload for Open Mobile Alliance BCAST 1.0 MIKEY fields for OMA BCAST key, reporting and parental-control messages. RFC 7155 Diameter NAS Diameter Network Access Server Application How a network access server asks a Diameter server who may connect, what they may do, and what they used. RFC 9525 Service identity in TLS Service Identity in TLS How a TLS client decides that the certificate it was given belongs to the service it wanted to reach. RFC 1984 IAB Crypto Statement IAB and IESG Statement on Cryptographic Technology and the Internet The IAB and IESG argue against export controls, weak keys and key escrow for cryptography. RFC 2350 CSIRT Expectations Expectations for Computer Security Incident Response What the Internet community should be able to find out about the incident response team it relies on. RFC 3013 ISP Security Recommended Internet Service Provider Security Services and Procedures What the Internet community expects a service provider to do about security. RFC 3365 Strong security rule Strong Security Requirements for Internet Engineering Task Force Standard Protocols The IETF rule that its standard protocols must be able to provide strong security. RFC 3713 Camellia A Description of the Camellia Encryption Algorithm How the Camellia block cipher turns a fixed-size input into ciphertext using a secret key. RFC 4493 AES-CMAC The AES-CMAC Algorithm A message authentication code built from AES and a shared secret key. RFC 6092 IPv6 CPE Security Recommended Simple Security Capabilities in Customer Premises Equipment (CPE) for Providing Residential IPv6 Internet Service Recommended baseline packet-filtering behavior for residential and small-office IPv6 gateways. RFC 9334 RATS Architecture Remote ATtestation procedureS (RATS) Architecture A shared architecture for collecting, checking and using evidence about a device's state. RFC 9700 OAuth 2.0 Security BCP Best Current Practice for OAuth 2.0 Security What OAuth implementers should require today, and the attacks each requirement answers. RFC 2585 Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP How to publish and fetch X.509 certificates and revocation lists with plain FTP and HTTP. RFC 3274 Compressed Data Content Type for Cryptographic Message Syntax (CMS) A CMS content type that carries compressed data, so later steps have less to process. RFC 4030 DHCP Relay Auth The Authentication Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Option A keyed hash and a counter that let a DHCP server trust the data a relay agent adds on the way. RFC 4108 CMS Firmware Packages Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages How to wrap a firmware update in signed, optionally encrypted CMS so a device only runs code from sources it trusts. RFC 4231 HMAC-SHA-2 test vectors Identifiers and Test Vectors for HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 Official names and known-answer test cases for HMAC with SHA-224, SHA-256, SHA-384 and SHA-512. RFC 4309 AES-CCM for ESP Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP) How the Advanced Encryption Standard in CCM mode protects an IPsec ESP packet, with the nonce in the packet. RFC 5374 IPsec Multicast Multicast Extensions to the Security Architecture for the Internet Protocol How IPsec protects packets sent to a whole group, where the destination is a multicast address. RFC 6030 PSKC Portable Symmetric Key Container (PSKC) An XML container for carrying a shared secret and everything the device needs to use it. RFC 6031 CMS symmetric key package Cryptographic Message Syntax (CMS) Symmetric Key Package Content Type A standard envelope for handing one or more plaintext symmetric keys, plus their metadata, from one party to another. RFC 6113 Kerberos Pre-Auth A Generalized Framework for Kerberos Pre-Authentication The common ground that every Kerberos pre-authentication method is built on. RFC 7183 NHDP OLSRv2 integrity Integrity Protection for the Neighborhood Discovery Protocol (NHDP) and Optimized Link State Routing Protocol Version 2 (OLSRv2) A required tamper seal and freshness stamp for the control messages of wireless mesh routing protocols. RFC 7619 IKEv2 NULL Auth The NULL Authentication Method in the Internet Key Exchange Protocol Version 2 (IKEv2) A way for an IKEv2 peer to say openly that it will not prove its identity, while keeping the session encrypted. RFC 7800 JWT Proof of Possession Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs) How a JSON Web Token can name a key that only its holder can use, so a stolen token is not enough. RFC 8915 NTS Network Time Security for the Network Time Protocol How a time client checks that the time it was given really came from the server it asked, using TLS once and fast symmetric cryptography after that. RFC 9629 KEM in CMS Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS) How CMS messages can be encrypted with key encapsulation mechanisms, including quantum-secure ones. RFC 5903 ECP groups for IKE Elliptic Curve Groups modulo a Prime (ECP Groups) for IKE and IKEv2 Three prime-field elliptic-curve groups and their key formats for IKE and IKEv2. RFC 5932 Camellia TLS Camellia Cipher Suites for TLS TLS cipher suites that use the Camellia block cipher, including SHA-2 based ones. RFC 4226 HOTP HOTP: An HMAC-Based One-Time Password Algorithm How a shared secret and synchronized counter produce a short one-time password. RFC 4357 GOST Extras Additional Cryptographic Algorithms for Use with GOST 28147-89, GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94 Algorithms Supplementary modes, key handling, and parameter sets for the GOST cryptographic algorithms. RFC 7091 GOST R 34.10-2012 GOST R 34.10-2012: Digital Signature Algorithm An English description of the Russian digital-signature standard GOST R 34.10-2012. RFC 7202 Securing the RTP Framework: Why RTP Does Not Mandate a Single Media Security Solution Why RTP specifies different security choices for different kinds of media applications. RFC 8554 LMS Signatures Leighton-Micali Hash-Based Signatures A stateful digital-signature system built from one-time signatures and hash trees. RFC 2228 FTP Security FTP Security Extensions Optional FTP commands that add authentication, integrity and encryption to the control and data channels. RFC 3560 RSAES-OAEP in CMS Use of the RSAES-OAEP Key Transport Algorithm in Cryptographic Message Syntax (CMS) How to lock the one-time content key of a CMS message with RSA using OAEP padding, which closes the Million Message Attack hole. RFC 3566 AES-XCBC-MAC-96 The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec A message authentication code built from AES that stays secure for messages of any length, for use with IPsec ESP and AH. RFC 3957 Authentication, Authorization, and Accounting (AAA) Registration Keys for Mobile IPv4 How an AAA server can hand a mobile node the keys it needs with its home and foreign agents. RFC 4056 RSASSA-PSS in CMS Use of the RSASSA-PSS Signature Algorithm in Cryptographic Message Syntax (CMS) How to sign CMS messages with the RSASSA-PSS signature scheme, and which parameters must match. RFC 4543 GMAC in IPsec The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH Using AES-GMAC in IPsec to authenticate packets without encrypting them. RFC 4754 ECDSA for IKE IKE and IKEv2 Authentication Using the Elliptic Curve Digital Signature Algorithm (ECDSA) How IKE and IKEv2 can authenticate each other with elliptic curve signatures instead of RSA or DSA. RFC 5054 SRP for TLS Using the Secure Remote Password (SRP) Protocol for TLS Authentication How TLS can authenticate a user with Secure Remote Password rather than relying only on certificates. RFC 5792 PA-TNC PA-TNC: A Posture Attribute (PA) Protocol Compatible with Trusted Network Connect (TNC) The message format an endpoint uses to report its security posture, such as antivirus, firewall and OS details, during a network health check. RFC 5793 PB-TNC PB-TNC: A Posture Broker (PB) Protocol Compatible with Trusted Network Connect (TNC) How a device and a network server swap health-check messages in batches before deciding whether the device may join. RFC 5830 GOST 28147-89 GOST 28147-89: Encryption, Decryption, and Message Authentication Code (MAC) Algorithms The GOST block cipher's encryption modes and message authentication code procedure. RFC 5922 SIP domain certificates Domain Certificates in the Session Initiation Protocol (SIP) How a SIP server proves it is authoritative for a domain, using an X.509 certificate. RFC 5934 TAMP Trust Anchor Management Protocol (TAMP) A protocol for installing, replacing and checking the public keys a device trusts. RFC 6677 EAP Channel Binding Channel-Binding Support for Extensible Authentication Protocol (EAP) Methods How an EAP client and server catch an access point or visited network that lies about what it offers. RFC 7366 Encrypt-then-MAC Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) A TLS and DTLS extension that lets both sides switch to the safer order of encrypting first and adding the MAC afterwards. RFC 7427 IKEv2 signature auth Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) One IKEv2 authentication method that carries the signature algorithm with the signature, so new hashes and curves need no new codes. RFC 7469 HTTP Public Key Pinning Public Key Pinning Extension for HTTP How a website tells browsers which public keys to expect in its certificate chain on future visits. RFC 7924 TLS Cached Info Transport Layer Security (TLS) Cached Information Extension A TLS extension that lets a client say it already has the server's certificate, so the server sends a fingerprint instead of the certificate chain. RFC 7925 TLS/DTLS for IoT Transport Layer Security (TLS) / Datagram Transport Layer Security (DTLS) Profiles for the Internet of Things Which TLS and DTLS 1.2 options a small, resource-limited device should use to talk securely. RFC 8268 More MODP Groups for SSH More Modular Exponentiation (MODP) Diffie-Hellman (DH) Key Exchange (KEX) Groups for Secure Shell (SSH) Newer Diffie-Hellman groups for Secure Shell, and a correction to the range check on the peer's key. RFC 8417 Security Event Token Security Event Token (SET) A signed statement that something security-relevant happened, for another system to act on. RFC 8702 SHAKE in CMS Use of the SHAKE One-Way Hash Functions in the Cryptographic Message Syntax (CMS) How to sign and authenticate mail with the SHAKE hash functions in Cryptographic Message Syntax. RFC 8705 OAuth mutual TLS OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens Lets an OAuth client authenticate with a TLS certificate and ties access tokens to that certificate. RFC 8707 OAuth resource param Resource Indicators for OAuth 2.0 A request parameter that lets an OAuth client say which API a requested access token is meant for. RFC 8731 SSH Curve25519/448 Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448 Two elliptic curve key exchange methods for SSH, built on Curve25519 and Curve448. RFC 9172 BPSec Bundle Protocol Security (BPSec) Integrity and confidentiality for bundles in delay-tolerant networks, applied block by block with pluggable security contexts. RFC 9242 IKEv2 Intermediate Exch Intermediate Exchange in the Internet Key Exchange Protocol Version 2 (IKEv2) A new IKEv2 exchange that lets peers move large amounts of data, such as post-quantum public keys, before authentication. RFC 9266 TLS 1.3 Channel Binding Channel Bindings for TLS 1.3 A way to tie a login to the exact TLS 1.3 connection it runs over, using exported keying material. RFC 9370 IKEv2 Multiple KE Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 can run several key exchanges in a row so the session key survives a quantum computer. RFC 9374 DRIP Entity Tag DRIP Entity Tag (DET) for Unmanned Aircraft System Remote ID (UAS RID) Self-asserting IPv6 addresses that give every drone a hard-to-fake ID and a pointer to its registry. RFC 9449 OAuth DPoP OAuth 2.0 Demonstrating Proof of Possession (DPoP) How an OAuth client proves, on every request, that it holds the private key a token was issued to, so stolen tokens are not enough. RFC 9483 Lightweight CMP Lightweight Certificate Management Protocol (CMP) Profile A trimmed-down profile of CMP that lets industrial and IoT devices get and renew certificates automatically. RFC 9853 DTLS return routability Return Routability Check for DTLS 1.2 and 1.3 How a DTLS endpoint proves a peer is really reachable at a new address before it starts sending there. RFC 9887 TACACS+ over TLS Terminal Access Controller Access-Control System Plus (TACACS+) over TLS 1.3 Putting TACACS+ inside a TLS 1.3 connection so device-admin traffic is really encrypted. RFC 9967 SCIM SET profile System for Cross-Domain Identity Management (SCIM) Profile for Security Event Tokens (SETs) How SCIM services push change notices as Security Event Tokens instead of being polled. RFC 1413 Ident Identification Protocol A small TCP service that names the user behind a connection, and why its answer is only as good as the host that gives it. RFC 4178 SPNEGO The Simple and Protected Generic Security Service Application Program Interface (GSS-API) Negotiation Mechanism How two programs using GSS-API agree on a shared security mechanism, and notice if an attacker tampers with the choice. RFC 4669 RADIUS auth server MIB RADIUS Authentication Server MIB for IPv6 The SNMP counters a RADIUS authentication server keeps about itself and each client, redone so they work with IPv6 addresses. RFC 6955 DH Proof-of-Possession Diffie-Hellman Proof-of-Possession Algorithms How to prove you hold a Diffie-Hellman private key when the key cannot sign. RFC 8062 Kerberos Anonymity Anonymity Support for Kerberos How a Kerberos client can prove who a server is without telling the server, or even the KDC, who the client is. RFC 8550 S/MIME 4.0 Certs Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Certificate Handling The rules an S/MIME 4.0 mail agent must follow when it checks the certificates behind a message. RFC 8659 DNS CAA record DNS Certification Authority Authorization (CAA) Resource Record A DNS record that tells certificate authorities which of them may issue certificates for a domain. RFC 8439 ChaCha20-Poly1305 ChaCha20 and Poly1305 for IETF Protocols A stream cipher and message authenticator combined for authenticated encryption. RFC 2412 OAKLEY The OAKLEY Key Determination Protocol A Diffie-Hellman protocol for two authenticated parties to establish shared keying material. RFC 2627 Multicast Key Management Key Management for Multicast: Issues and Architectures How to distribute and replace a shared encryption key when multicast members change. RFC 4014 DHCP RADIUS Suboption Remote Authentication Dial-In User Service (RADIUS) Attributes Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Information Option How a network access device hands RADIUS authorization attributes to a DHCP server through the relay agent. RFC 4432 SSH RSA key exchange RSA Key Exchange for the Secure Shell (SSH) Transport Layer Protocol A faster SSH key exchange that lets a slow client lock a random secret to the server's temporary RSA key. RFC 4681 TLS user mapping TLS User Mapping Extension A TLS extension that lets a client hint which directory account its certificate belongs to. RFC 4757 RC4-HMAC Kerberos The RC4-HMAC Kerberos Encryption Types Used by Microsoft Windows The RC4-based Kerberos encryption and checksum types introduced in Microsoft Windows 2000. RFC 4942 IPv6 Transition/Co-existence Security Considerations A survey of security issues when IPv6 operates alongside IPv4 and transition mechanisms. RFC 5209 NEA Network Endpoint Assessment (NEA): Overview and Requirements The problem statement, reference model, and requirements for Network Endpoint Assessment. RFC 6268 CMS/PKIX ASN.1 modules Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX) Nine CMS and PKIX ASN.1 modules rewritten in 2008 syntax without changing wire formats. RFC 6943 Issues in Identifier Comparison for Security Purposes Security risks when different systems compare the same identifier in different ways RFC 7624 Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement A threat model for large-scale attacks that collect Internet communications without being noticed. RFC 7721 IPv6 Address Privacy Security and Privacy Considerations for IPv6 Address Generation Mechanisms How IPv6 interface-identifier choices affect tracking, scanning, and device profiling. RFC 7801 Kuznyechik GOST R 34.12-2015: Block Cipher "Kuznyechik" An informational description of the Kuznyechik block cipher in GOST R 34.12-2015. RFC 7836 GOST Algorithms Guidelines on the Cryptographic Algorithms to Accompany the Usage of Standards GOST R 34.10-2012 and GOST R 34.11-2012 Algorithm specifications for protocols using the GOST 2012 signature and hash standards. RFC 7905 ChaCha20-Poly1305 TLS ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS) Two fast, software-friendly primitives become a new family of cipher suites for TLS and DTLS. RFC 8252 OAuth for Native Apps OAuth 2.0 for Native Apps Why a mobile app should send the user to the browser to sign in, and how to bring the answer back. RFC 8612 DOTS Requirements DDoS Open Threat Signaling (DOTS) Requirements Requirements for resilient signaling between networks coordinating a DDoS response. RFC 8891 Magma GOST R 34.12-2015: Block Cipher "Magma" An informational description of Magma, the 64-bit block cipher in GOST R 34.12-2015. RFC 9148 EST-coaps EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol How small, low-power devices get their certificates by running EST over secure CoAP instead of HTTPS. RFC 9180 HPKE Hybrid Public Key Encryption A recipe for encrypting messages to a recipient's public key using three cryptographic building blocks. RFC 9416 Transient ID Security Security Considerations for Transient Numeric Identifiers Employed in Network Protocols What protocol specifications must say about numbers they pick at random, such as sequence numbers and port numbers. RFC 4162 SEED in TLS Addition of SEED Cipher Suites to Transport Layer Security (TLS) Six TLS cipher suites that use the SEED block cipher, a Korean standard, for bulk encryption. RFC 6460 Suite B TLS Suite B Profile for Transport Layer Security (TLS) A profile that limits TLS 1.2 to cryptographic algorithms in the NSA Suite B policy. RFC 6347 DTLS 1.2 Datagram Transport Layer Security Version 1.2 TLS 1.2 security mechanisms adapted for datagrams that can be lost or reordered. RFC 2025 SPKM The Simple Public-Key GSS-API Mechanism (SPKM) Lets a program use public-key certificates for authentication and message protection through the GSS-API. RFC 4535 GSAKMP GSAKMP: Group Secure Association Key Management Protocol How a secure group gets its policy, its members and its shared keys, and how it recovers when a member goes bad. RFC 5282 AEAD in IKEv2 Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 (IKEv2) Protocol How IKEv2 can protect its messages with one combined encrypt-and-authenticate algorithm such as AES GCM or AES CCM. RFC 5758 DSA and ECDSA with SHA-2 Internet X.509 Public Key Infrastructure: Additional Algorithms and Identifiers for DSA and ECDSA Adds the SHA-2 hash functions, and the DSA and ECDSA signature algorithms that use them, to the Internet X.509 profile. RFC 6188 AES-192/256 in SRTP The Use of AES-192 and AES-256 in Secure RTP How to use the larger 192-bit and 256-bit AES keys to encrypt secure audio and video streams. RFC 6494 SEND certificate profile Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND) How routers, proxies and address owners prove their right to speak in IPv6 Neighbor Discovery, using RPKI certificates. RFC 6797 HSTS HTTP Strict Transport Security (HSTS) How a website tells your browser to never talk to it without encryption again. RFC 6980 ND and Fragmentation Security Implications of IPv6 Fragmentation with IPv6 Neighbor Discovery Why IPv6 Neighbor Discovery messages must not be fragmented. RFC 7203 IODEF Structured Info An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information A standard way to embed structured vulnerability, attack and remediation data inside IODEF incident reports. RFC 7210 Routing key table Database of Long-Lived Symmetric Cryptographic Keys A common table for the long-lived keys that routing protocols use to authenticate their messages. RFC 7383 IKEv2 fragmentation Internet Key Exchange Protocol Version 2 (IKEv2) Message Fragmentation How IKEv2 splits its own large messages into smaller encrypted pieces so they get past devices that drop IP fragments. RFC 7521 OAuth Assertions Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants A common frame for letting OAuth 2.0 clients prove who they are, or what they may do, with a signed statement from someone else. RFC 7523 OAuth JWT Profile JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants How a signed JSON token can ask for an access token or stand in for a client's password. RFC 7652 PCP Authentication Port Control Protocol (PCP) Authentication Mechanism Lets a NAT or firewall check, using EAP, that a client is allowed to change its port mappings. RFC 7919 TLS FFDHE Groups Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS) Named finite-field Diffie-Hellman groups that let TLS clients and servers agree on safe key-exchange parameters. RFC 8080 EdDSA for DNSSEC Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC How DNSSEC zones can sign their records with the Ed25519 and Ed448 EdDSA algorithms. RFC 8213 DHCP Relay Security Security of Messages Exchanged between Servers and Relay Agents DHCP relay agents and servers must be able to talk over encrypted IPsec, and operators are urged to turn it on. RFC 8332 SSH RSA SHA-2 Use of RSA Keys with SHA-256 and SHA-512 in the Secure Shell (SSH) Protocol How SSH keeps your existing RSA keys while moving signatures from SHA-1 to SHA-256 and SHA-512. RFC 8784 IKEv2 PSK mixing Mixing Preshared Keys in the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-quantum Security Mixing an extra preshared key into IKEv2 so that VPN traffic stays protected even if quantum computers break today's key exchange. RFC 9060 STIR Cert Delegation Secure Telephone Identity Revisited (STIR) Certificate Delegation How a holder of phone-number authority can hand a slice of it to another party through a delegate certificate. RFC 9142 Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH) Which SSH key exchange methods to require, encourage, discourage or ban, now that SHA-1 and small keys are no longer strong enough. RFC 9258 Importing PSKs Importing External Pre-Shared Keys (PSKs) for TLS 1.3 How to turn a pre-shared key provisioned outside TLS into separate, safely bound keys for TLS 1.3. RFC 9303 LISP-SEC Locator/ID Separation Protocol Security (LISP-SEC) Adds one-time keys and HMACs to LISP map lookups so a forged or overclaimed mapping gets caught. RFC 9645 YANG TLS Groupings YANG Groupings for TLS Clients and TLS Servers Reusable YANG building blocks for configuring the TLS client and TLS server inside any management data model. RFC 9711 Entity Attestation Token The Entity Attestation Token (EAT) A signed bundle of claims in which a device tells a server what it is, what software it runs, and what state it is in. RFC 1704 Internet authentication On Internet Authentication A survey of authentication methods and the attacks they are designed to resist. RFC 1760 S/KEY The S/KEY One-Time Password System A one-time password method that prevents a captured login password from being reused. RFC 2144 CAST-128 The CAST-128 Encryption Algorithm An unencumbered encryption algorithm with variable key sizes and a 64-bit block. RFC 2977 Mobile IP Authentication, Authorization, and Accounting Requirements Requirements for authentication, authorization and accounting when Mobile IP users visit another network. RFC 3128 Protection Against a Variant of the Tiny Fragment Attack (RFC 1858) A correction for a tiny overlapping fragment attack that can bypass some filters. RFC 4017 EAP WLAN Reqs Extensible Authentication Protocol (EAP) Method Requirements for Wireless LANs The required, recommended and optional features for EAP methods used in wireless LANs. RFC 4046 MSEC Key Management Multicast Security (MSEC) Group Key Management Architecture A common architecture for admitting members and distributing keys to secure groups. RFC 4285 MIPv6 auth option Authentication Protocol for Mobile IPv6 A shared-key method for authenticating Mobile IPv6 registration messages in specific networks. RFC 4890 Recommendations for Filtering ICMPv6 Messages in Firewalls How firewalls can filter ICMPv6 without breaking functions that IPv6 needs. RFC 5069 Emergency Call Security Security Threats and Requirements for Emergency Call Marking and Mapping Threats to marking emergency calls and mapping caller locations to public safety answering points. RFC 5649 AES key wrap padding Advanced Encryption Standard (AES) Key Wrap with Padding Algorithm A padding extension that lets AES Key Wrap protect key data whose length is not a multiple of 64 bits. RFC 5927 ICMP Attacks against TCP How forged ICMP errors can disrupt TCP and how implementations limit their effect RFC 6039 Issues with Existing Cryptographic Protection Methods for Routing Protocols A survey of management and replay-protection limits in cryptographic methods used by routing protocols. RFC 6169 IP Tunnel Security Security Concerns with IP Tunneling Security risks and mitigations for IP packets carried through tunnels over UDP or TCP. RFC 6189 ZRTP ZRTP: Media Path Key Agreement for Unicast Secure RTP How two endpoints agree on keys for secure RTP media directly over the media path. RFC 8603 CNSA Certificate Profile Commercial National Security Algorithm (CNSA) Suite Certificate and Certificate Revocation List (CRL) Profile Certificate and revocation-list requirements for systems using the CNSA Suite. RFC 9162 Certificate Transparency Certificate Transparency Version 2.0 Append-only public logs let anyone check whether TLS certificates have been recorded. RFC 9794 PQ/T hybrid terminology Terminology for Post-Quantum Traditional Hybrid Schemes Shared terminology for schemes that combine post-quantum and traditional algorithms. RFC 4346 TLS 1.1 The Transport Layer Security (TLS) Protocol Version 1.1 TLS 1.1 revised the protocol for private and integrity-protected communication between applications. RFC 2246 TLS 1.0 The TLS Protocol Version 1.0 The first TLS specification for privacy and data integrity between applications. RFC 2419 PPP DESE The PPP DES Encryption Protocol, Version 2 (DESE-bis) How to encrypt PPP packets with DES in chaining mode, with a nonce, sequence numbers and recovery from lost packets. RFC 3739 Qualified Certs Internet X.509 Public Key Infrastructure: Qualified Certificates Profile A profile for X.509 identity certificates issued to real people, written to work under any country's legal rules. RFC 4668 RADIUS auth client MIB RADIUS Authentication Client MIB for IPv6 The SNMP counters a RADIUS client keeps about each authentication server, redone so they work with IPv6 addresses. RFC 4822 RIPv2 Authentication RIPv2 Cryptographic Authentication How RIPv2 routers put a keyed fingerprint in every routing update so a neighbour can check where it came from. RFC 8002 HIP Certificates Host Identity Protocol Certificates A standard envelope for carrying digital certificates inside Host Identity Protocol control packets. RFC 9919 Lightweight OCSP profile The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments How to slim down and cache OCSP certificate-status checks so they scale to millions of users. RFC 9973 TLS cert + ext PSK TLS 1.3 Extension for Using Certificates with an External Pre-Shared Key A TLS 1.3 extension that mixes an external pre-shared key into the handshake while keeping certificate authentication. RFC 2802 IOTP signatures Digital Signatures for the v1.0 Internet Open Trading Protocol (IOTP) The XML signature syntax and procedures specified for Internet Open Trading Protocol version 1.0. RFC 2904 AAA Authorization Framework A framework for deciding whether users may access Internet services across organizations. RFC 2979 Behavior of and Requirements for Internet Firewalls Behavioral requirements intended to keep firewalls from breaking legitimate network traffic. RFC 2985 PKCS #9 PKCS #9: Selected Object Classes and Attribute Types Version 2.0 A set of directory classes and attribute definitions used with public-key standards. RFC 3715 IPsec-Network Address Translation (NAT) Compatibility Requirements Why address translation conflicts with IPsec and what compatibility proposals must support. RFC 3740 Multicast Security The Multicast Group Security Architecture A framework for the entities, keys and services used to secure large multicast groups. RFC 3837 OPES Security Threats Security Threats and Risks for Open Pluggable Edge Services (OPES) Risks created when processors can inspect and transform application messages in transit. RFC 4081 NSIS Threats Security Threats for Next Steps in Signaling (NSIS) Threat scenarios that NSIS designers need to consider when signaling installs network state. RFC 8391 XMSS XMSS: eXtended Merkle Signature Scheme A stateful digital-signature scheme built from one-time keys and hash trees. RFC 8701 GREASE Applying Generate Random Extensions And Sustain Extensibility (GREASE) to TLS Extensibility Reserved TLS values that test whether implementations tolerate unknown values RFC 8811 DOTS architecture DDoS Open Threat Signaling (DOTS) Architecture The components and relationships used to coordinate DDoS mitigation requests. RFC 8862 SIPBRANDY Best Practices for Securing RTP Media Signaled with SIP How to set up encrypted SIP calls whose keys are tied to the caller's signed identity. RFC 9380 Hash to Curve Hashing to Elliptic Curves Algorithms for mapping arbitrary byte strings to elliptic-curve points. RFC 4671 RADIUS acct server MIB RADIUS Accounting Server MIB for IPv6 Management objects and counters for RADIUS accounting servers, including IP version-neutral client addresses. RFC 1108 DoD IP Security Options U.S. Department of Defense Security Options for the Internet Protocol Two IP options for carrying U.S. Department of Defense security labels. RFC 6257 Bundle Security Protocol Bundle Security Protocol Specification Security blocks for protecting payloads and other data in delay-tolerant bundles. RFC 2451 ESP CBC Ciphers The ESP CBC-Mode Cipher Algorithms One common recipe for using block ciphers such as Blowfish, CAST-128, IDEA, RC5 and 3DES with IPsec ESP. RFC 2847 LIPKEY LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM A thin GSS-API layer that lets a client log in with a password over a channel secured by the server's certificate, like a typical TLS setup. RFC 3554 SCTP with IPsec On the Use of Stream Control Transmission Protocol (SCTP) with IPsec What IPsec and IKE must do so that SCTP associations with several addresses can be protected. RFC 3853 AES for SIP S/MIME S/MIME Advanced Encryption Standard (AES) Requirement for the Session Initiation Protocol (SIP) SIP's mandatory S/MIME encryption algorithm changes from 3DES to AES. RFC 3871 ISP Infra Security Operational Security Requirements for Large Internet Service Provider (ISP) IP Network Infrastructure Operational security requirements for routers and switches in large ISP networks. RFC 4073 CMS Multiple Contents Protecting Multiple Contents with the Cryptographic Message Syntax (CMS) Two CMS content types for bundling several contents together, optionally with attributes, under one layer of protection. RFC 4383 TESLA in SRTP The Use of Timed Efficient Stream Loss-Tolerant Authentication (TESLA) in the Secure Real-time Transport Protocol (SRTP) How to prove who sent each packet of a multicast media stream, using delayed key disclosure inside SRTP. RFC 4491 GOST in X.509 Using the GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94 Algorithms with the Internet X.509 Public Key Infrastructure Certificate and CRL Profile How to write GOST signatures, hashes and public keys into X.509 certificates and CRLs. RFC 4581 CGA extensions Cryptographically Generated Addresses (CGA) Extension Field Format A Type-Length-Value format for Cryptographically Generated Address extensions. RFC 4643 NNTP authentication Network News Transfer Protocol (NNTP) Extension for Authentication An NNTP extension that lets a client authenticate before it reads or posts to a news server. RFC 4650 MIKEY DH with HMAC HMAC-Authenticated Diffie-Hellman for Multimedia Internet KEYing (MIKEY) Setting up fresh media keys in one round trip using Diffie-Hellman, with a pre-shared secret proving who is who. RFC 4738 MIKEY-RSA-R MIKEY-RSA-R: An Additional Mode of Key Distribution in Multimedia Internet KEYing (MIKEY) A MIKEY mode where the responder picks the traffic key and proves who it is, for calls that get forwarded and for group key download. RFC 4982 CGA Hash Agility Support for Multiple Hash Algorithms in Cryptographically Generated Addresses (CGAs) Why SHA-1 attacks do not break CGAs, and how the Sec bits can signal other hash algorithms later. RFC 5027 SDP Security Precond. Security Preconditions for Session Description Protocol (SDP) Media Streams A way to hold off ringing the phone until both sides know how to decrypt each other's media. RFC 5422 EAP-FAST Provisioning Dynamic Provisioning Using Flexible Authentication via Secure Tunneling Extensible Authentication Protocol (EAP-FAST) How EAP-FAST provisions credentials through a protected TLS tunnel. RFC 5485 I-D digital signatures Digital Signatures on Internet-Draft Documents How the IETF Secretariat signs Internet-Drafts without changing the draft file. RFC 5544 Timestamp binding Syntax for Binding Documents with Time-Stamps A CMS envelope that stores a document with its time-stamp evidence. RFC 5685 IKEv2 Redirect Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2) How an overloaded or retiring VPN gateway can tell an IKEv2 client to connect to a different gateway. RFC 5831 GOST R 34.11-94 GOST R 34.11-94: Hash Function Algorithm An informational description of the Russian GOST R 34.11-94 hash function. RFC 5832 GOST R 34.10-2001 GOST R 34.10-2001: Digital Signature Algorithm How GOST R 34.10-2001 generates and verifies elliptic-curve signatures. RFC 5896 GSS-API OK-AS-DELEGATE Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy A GSS-API flag that delegates a user's credentials only when central policy says the service can be trusted with them. RFC 5991 Teredo Teredo Security Updates Randomizing bits in Teredo addresses and retiring the cone bit so attackers have a harder time scanning. RFC 6187 SSH X.509 X.509v3 Certificates for Secure Shell Authentication How SSH servers and users can prove who they are with X.509 certificate chains instead of bare keys. RFC 6211 CMS algorithm protection Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute A signed copy of the algorithm names, so an attacker cannot quietly swap in a weaker hash or signature algorithm. RFC 6345 PANA Relay Protocol for Carrying Authentication for Network Access (PANA) Relay Element A relay node that lets PANA clients and authentication agents talk when normal IP routing cannot connect them. RFC 6989 Additional Diffie-Hellman Tests for the Internet Key Exchange Protocol Version 2 (IKEv2) Extra sanity checks IKEv2 peers must run on a received Diffie-Hellman public value, so reused keys cannot be attacked. RFC 7009 OAuth Token Revocation OAuth 2.0 Token Revocation A standard way for an OAuth client to tell the server that a token is no longer needed. RFC 7055 GSS-EAP A GSS-API Mechanism for the Extensible Authentication Protocol How applications that speak GSS-API or SASL can sign users in through EAP and a backend AAA server. RFC 7861 RPCSEC_GSS v3 Remote Procedure Call (RPC) Security Version 3 Lets an RPC client tell the server more about who is calling and what they are allowed. RFC 8019 IKEv2 DDoS Protection Protecting Internet Key Exchange Protocol Version 2 (IKEv2) Implementations from Distributed Denial-of-Service Attacks Defenses and a proof-of-work puzzle that help IKEv2 servers survive floods of fake connection attempts. RFC 8110 OWE Opportunistic Wireless Encryption Wireless encryption for open Wi-Fi that does not require a shared password. RFC 8628 OAuth Device Grant OAuth 2.0 Device Authorization Grant How a TV or printer with no good keyboard gets your permission by showing a short code you approve on your phone. RFC 8692 SHAKE in X.509 Internet X.509 Public Key Infrastructure: Additional Algorithm Identifiers for RSASSA-PSS and ECDSA Using SHAKEs Algorithm identifiers that let X.509 certificates and CRLs use the SHAKE hash functions with RSASSA-PSS and ECDSA signatures. RFC 8737 ACME TLS-ALPN challenge Automated Certificate Management Environment (ACME) TLS Application-Layer Protocol Negotiation (ALPN) Challenge Extension A way for a certificate authority to check domain ownership using nothing but a special TLS handshake on port 443. RFC 8739 ACME STAR certificates Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME) An ACME extension where the CA keeps reissuing short-lived certificates, so a compromised key is handled by stopping renewal instead of revoking. RFC 8871 PERC A Solution Framework for Private Media in Privacy-Enhanced RTP Conferencing (PERC) How a group video call can keep its media secret from the very servers that forward it. RFC 9045 CRMF Algorithm Update Algorithm Requirements Update to the Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF) Swaps the aging SHA-1, DES and Triple-DES defaults in password-protected certificate requests for SHA-256, HMAC-SHA256 and AES-GMAC. RFC 9101 OAuth JAR The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR) Put an OAuth 2.0 authorization request inside a signed (and optionally encrypted) JWT instead of plain URL parameters. RFC 9145 Secure NSH Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers How to seal the Network Service Header against tampering and hide sensitive metadata inside it. RFC 9203 ACE OSCORE Profile The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework How a small device proves it holds an OAuth access token's key and sets up OSCORE-protected CoAP with a server. RFC 9347 IP-TFS Aggregation and Fragmentation Mode for Encapsulating Security Payload (ESP) and Its Use for IP Traffic Flow Security (IP-TFS) A fixed-size, constant-rate ESP tunnel that packs and splits IP packets so observers cannot read traffic patterns. RFC 9393 CoSWID Concise Software Identification Tags A compact binary form of software identification tags, built for devices with little network and storage capacity. RFC 9420 MLS The Messaging Layer Security (MLS) Protocol How a group chat, from two people to thousands, agrees on encryption keys even when members are not online together. RFC 9481 CMP algorithms Certificate Management Protocol (CMP) Algorithms A current shopping list of cryptographic algorithms for CMP, replacing the aging list in RFC 4210. RFC 9848 ECH in DNS Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings How a server publishes its Encrypted ClientHello settings in DNS so clients can find them before connecting. RFC 9851 TLS 1.2 feature freeze TLS 1.2 is in Feature Freeze TLS 1.2 changes are limited, with exceptions for urgent fixes and two registries. RFC 9864 Fully-specified algs Fully-Specified Algorithms for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) Algorithm names for JOSE and COSE that state every choice, so negotiation by name alone actually works. RFC 9916 PCEPS TLS version rules Updates to the Usage of TLS to Provide a Secure Transport for the Path Computation Element Communication Protocol (PCEP) PCEPS implementations must prefer the latest TLS version and avoid early data. RFC 9918 NETCONF over TLS update Updates to Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication NETCONF updates TLS support requirements and prohibits TLS 1.3 early data. RFC 9935 ML-KEM in X.509 Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) How to put quantum-resistant ML-KEM keys into X.509 certificates and private key files. RFC 9936 ML-KEM in CMS Use of ML-KEM in the Cryptographic Message Syntax (CMS) How to use ML-KEM to protect encrypted email and other CMS messages against quantum computers. RFC 9942 COSE Receipts CBOR Object Signing and Encryption (COSE) Receipts A compact, signed proof that an entry is in a transparency log, or that the log only ever grew. RFC 9966 Bootstrapped TLS Bootstrapped TLS Authentication with Proof of Knowledge How a brand-new device and a TLS server prove to each other that they know the device's key, before any credential exists. RFC 9399 X.509 Logotypes Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates How a certificate can carry a logo of its issuer, its owner or a community, purely to help people recognize it. RFC 9811 CMP over HTTP Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP) How to carry Certificate Management Protocol messages in HTTP POST requests, at a well-known URL. RFC 6367 Camellia TLS Addition of the Camellia Cipher Suites to Transport Layer Security (TLS) Forty-two TLS cipher suites let connections use the Camellia block cipher. RFC 3280 X.509 PKI profile Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile An Internet profile for X.509 certificates, revocation lists, and trust-path checks. RFC 2094 GKMP Architecture Group Key Management Protocol (GKMP) Architecture An architecture for creating and sharing symmetric keys among multicast group members. RFC 2522 Photuris Photuris: Session-Key Management Protocol A phased exchange for establishing session keys and security parameters between two peers. RFC 4434 AES-XCBC-PRF-128 The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE) A 128-bit pseudo-random function built from AES-XCBC-MAC by skipping its truncation step, for use in IKE. RFC 4505 SASL ANONYMOUS Anonymous Simple Authentication and Security Layer (SASL) Mechanism A SASL login method that lets a client in without saying who it is, replacing the old 'anonymous' plain-text password trick. RFC 9549 Internationalization Updates to RFC 5280 How X.509 certificates carry internationalized domain names and email addresses, with every name stored in its ASCII form. RFC 9654 OCSP Nonce Extension Online Certificate Status Protocol (OCSP) Nonce Extension Lets the OCSP Nonce be up to 128 octets long, while telling clients to use at least 32. RFC 9708 HSS/LMS in CMS Use of the HSS/LMS Hash-Based Signature Algorithm in the Cryptographic Message Syntax (CMS) How to sign CMS messages with hash-based HSS/LMS signatures that are considered safe against quantum computers. RFC 9765 RADIUS/1.1 RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5 An ALPN-negotiated RADIUS profile that removes packet-level MD5 use over TLS and DTLS. RFC 2202 HMAC Test Cases Test Cases for HMAC-MD5 and HMAC-SHA-1 Test cases with expected results for HMAC-MD5 and HMAC-SHA-1 implementations. RFC 2577 FTP Security Considerations Security guidance for FTP server operators and implementers. RFC 2704 KeyNote The KeyNote Trust-Management System Version 2 A trust-management system where a key is bound to what it is allowed to do, rather than to a name RFC 2906 AAA Authorization Requirements A comprehensive requirements checklist for Authentication, Authorization, and Accounting protocols. RFC 3218 Preventing the Million Message Attack on Cryptographic Message Syntax How uniform failure handling can prevent a padding oracle in CMS decryption. RFC 3964 Security Considerations for 6to4 The security risks of 6to4 tunneling and the checks routers should perform. RFC 4137 EAP state machines State Machines for Extensible Authentication Protocol (EAP) Peer and Authenticator State-machine descriptions for EAP peers, authenticators, and backend servers. RFC 4186 EAP-SIM Extensible Authentication Protocol Method for Global System for Mobile Communications (GSM) Subscriber Identity Modules (EAP-SIM) Using a mobile phone card to log in over the Internet, with stronger keys and mutual authentication. RFC 4832 NETLMM Security Threats Security Threats to Network-Based Localized Mobility Management (NETLMM) What can go wrong in the two interfaces a network-based mobility system relies on. RFC 5297 AES-SIV Synthetic Initialization Vector (SIV) Authenticated Encryption Using the Advanced Encryption Standard (AES) An AES mode for authenticated encryption that can also tolerate nonce reuse RFC 5355 RSerPool Threats Threats Introduced by Reliable Server Pooling (RSerPool) and Requirements for Security in Response to Threats What can go wrong when a protocol stands between a client and its server, and how each case is answered. RFC 5639 Brainpool curves Elliptic Curve Cryptography (ECC) Brainpool Standard Curves and Curve Generation Fourteen elliptic-curve parameter sets generated for use in cryptographic applications. RFC 6467 IKEv2 secure password Secure Password Framework for Internet Key Exchange Version 2 (IKEv2) A shared negotiation and message format for secure password methods in IKEv2. RFC 7457 TLS Known Attacks Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS) A snapshot of attacks on TLS and DTLS that motivated safer-use recommendations. RFC 7914 scrypt The scrypt Password-Based Key Derivation Function A password-based key derivation function designed to require memory RFC 9055 DetNet Security Deterministic Networking (DetNet) Security Considerations Security guidance for networks that promise bounded delay and packet loss. RFC 1446 SNMPv2 security Security Protocols for version 2 of the Simple Network Management Protocol (SNMPv2) How SNMPv2 management messages were made authentic, and optionally secret, with digests and one shared key. RFC 2401 IPsec Architecture Security Architecture for the Internet Protocol The IPsec architecture for security policies, associations and packet processing. RFC 4670 RADIUS acct client MIB RADIUS Accounting Client MIB for IPv6 A RADIUS accounting client management database that supports version-neutral IP addresses. RFC 7707 IPv6 Reconnaissance Network Reconnaissance in IPv6 Networks Why predictable IPv6 addresses and other network information can make reconnaissance possible. RFC 9879 PBMAC1 in PKCS #12 Use of Password-Based Message Authentication Code 1 (PBMAC1) in PKCS #12 Syntax How PKCS #12 can use PBMAC1 for password-based integrity protection. RFC 3852 CMS Cryptographic Message Syntax (CMS) A syntax for signing, digesting, authenticating, and encrypting message content. RFC 4306 IKEv2 Internet Key Exchange (IKEv2) Protocol IKEv2 negotiates keys and authentication for IPsec security associations. RFC 7525 TLS Best Practices Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) RFC 7525's recommendations for using TLS and DTLS securely. RFC 5996 IKEv2 Internet Key Exchange Protocol Version 2 (IKEv2) How IPsec peers authenticate and establish security associations. RFC 1829 ESP DES-CBC The ESP DES-CBC Transform How ESP scrambles IP payloads with DES in cipher block chaining mode, and why even the authors doubted it was strong enough. RFC 1929 SOCKS5 Username/Password Username/Password Authentication for SOCKS V5 A username-and-password method for the SOCKS version 5 authentication exchange. RFC 2403 HMAC-MD5-96 The Use of HMAC-MD5-96 within ESP and AH How IPsec ESP and AH use HMAC with MD5, cut to 96 bits, to prove packets are genuine and unaltered. RFC 2405 ESP DES-CBC The ESP DES-CBC Cipher Algorithm With Explicit IV How IPsec ESP can encrypt packets with DES in CBC mode, carrying a fresh random IV in every packet. RFC 2410 NULL Encryption The NULL Encryption Algorithm and Its Use With IPsec A cipher that does nothing on purpose, so IPsec ESP can authenticate packets without hiding them. RFC 2623 NFS Security Issues NFS Version 2 and Version 3 Security Issues and the NFS Protocol's Use of RPCSEC_GSS and Kerberos V5 What is weak about NFS version 2 and 3 security, and how NFS uses RPCSEC_GSS and Kerberos V5 to fix it. RFC 2726 PGP Authentication for RIPE Database Updates How the RIPE database can check that an update was really signed by the maintainer, using PGP. RFC 2946 Telnet Encryption Telnet Data Encryption Option A generic Telnet option that lets either side scramble its half of the conversation, leaving the choice of cipher to companion documents. RFC 3062 LDAP Password Modify LDAP Password Modify Extended Operation An LDAP extended operation for changing a user's password, whatever the identity form or storage. RFC 3820 Proxy Certificates Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile How a user can sign a short-lived, restricted certificate for a helper program, with no CA involved and no private key shared. RFC 3893 SIP AIB Session Initiation Protocol (SIP) Authenticated Identity Body (AIB) Format A small signed slice of a SIP request that lets the receiver check who really sent it. RFC 4043 Permanent Identifier Internet X.509 Public Key Infrastructure Permanent Identifier A certificate name form that stays the same even when a person's name, job or location changes. RFC 4308 IPsec crypto suites Cryptographic Suites for IPsec Two named, ready-made bundles of IPsec algorithms so administrators do not have to pick each one. RFC 4359 RSA in ESP and AH The Use of RSA/SHA-1 Signatures within Encapsulating Security Payload (ESP) and Authentication Header (AH) Digital signatures for IPsec packets, so group members can tell who really sent a packet. RFC 4771 Integrity Transform Carrying Roll-Over Counter for the Secure Real-time Transport Protocol (SRTP) A way to carry the SRTP roll-over counter inside packets so late joiners can get in sync. RFC 4985 SRVName SAN Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name A certificate name that says which service at a domain a server is allowed to provide. RFC 5021 Kerberos TCP Extensions Extended Kerberos Version 5 Key Distribution Center (KDC) Exchanges over TCP A way for Kerberos clients and servers to negotiate extensions over TCP using a spare bit in the length field. RFC 5178 GSS-API domain names Generic Security Service Application Program Interface (GSS-API) Internationalization and Domain-Based Service Names and Name Type A GSS-API name type that names a service by the domain it serves, plus Unicode-aware name functions. RFC 5192 DHCP Options for Protocol for Carrying Authentication for Network Access (PANA) Authentication Agents Two DHCP options that hand a network client the addresses of its PANA authentication agents. RFC 5276 SCVP Evidence Records Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records How a certificate validation server can hand back long-term proof records for the certificates and revocation data it used. RFC 5386 BTNS Better-Than-Nothing Security: An Unauthenticated Mode of IPsec How to set up IPsec without checking who the other side is, so traffic is at least protected from eavesdroppers. RFC 5587 GSS-API mech inquiry Extended Generic Security Service Mechanism Inquiry APIs New GSS-API calls that let applications pick a security mechanism by what it can do instead of hardcoding its identifier. RFC 5607 RADIUS NAS management Remote Authentication Dial-In User Service (RADIUS) Authorization for Network Access Server (NAS) Management New RADIUS attributes that say who may manage a network device, over which protocol, how securely, and with what privileges. RFC 5669 SEED in SRTP The SEED Cipher Algorithm and Its Use with the Secure Real-Time Transport Protocol (SRTP) How to use the Korean SEED block cipher to encrypt and authenticate secure voice and video streams. RFC 5698 DSSC Data Structure for the Security Suitability of Cryptographic Algorithms (DSSC) A machine-readable policy that says which cryptographic algorithms are still safe to use, and until when. RFC 5759 Suite B Profile Suite B Certificate and Certificate Revocation List (CRL) Profile A Suite B profile for X.509 certificates and certificate revocation lists. RFC 5848 Signed Syslog Signed Syslog Messages Syslog messages get detached signatures, so a log reader can check who wrote them, whether they were changed and whether any are missing. RFC 5857 IKEv2 for ROHCoIPsec IKEv2 Extensions to Support Robust Header Compression over IPsec How two IPsec peers use IKEv2 to agree on Robust Header Compression settings for a Child SA. RFC 5858 IPsec for ROHC IPsec Extensions to Support Robust Header Compression over IPsec The database fields and packet-handling rules IPsec needs so that header compression can run inside protected tunnels. RFC 5901 IODEF phishing Extensions to the IODEF-Document Class for Reporting Phishing A standard XML extension for sharing reports about phishing, from the first lure to the takedown of the site that collects stolen credentials. RFC 6032 CMS Encrypted Key Package Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type A CMS wrapper that lets encrypted key packages carry their own authorization check. RFC 6161 Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type Conventions for using elliptic-curve algorithms with CMS encrypted key packages. RFC 6162 Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Asymmetric Key Package Content Type Conventions for using ECDH and ECDSA with CMS asymmetric key packages. RFC 6290 IKEv2 crash detection A Quick Crash Detection Method for the Internet Key Exchange Protocol (IKE) A saved secret token lets a rebooted IKEv2 peer tell its partner to drop the dead tunnel and start over right away. RFC 6680 GSS-API Naming Generic Security Service Application Programming Interface (GSS-API) Naming Extensions New GSS-API calls that let applications read, set and export attributes of a name, such as group membership, for authorization. RFC 6734 Diameter key AVPs Diameter Attribute-Value Pairs for Cryptographic Key Transport A standard Diameter container for carrying several cryptographic keys in one message. RFC 7057 Update to the Extensible Authentication Protocol (EAP) Applicability Statement for Application Bridging for Federated Access Beyond Web (ABFAB) EAP is no longer only for network access: when it guards applications, channel bindings become mandatory. RFC 7191 CMS Key Receipts Cryptographic Message Syntax (CMS) Key Package Receipt and Error Content Types Two CMS message types that let a key package receiver say it arrived, or say exactly why it was rejected. RFC 7495 IODEF enumerations Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF) A standard way for an incident report to say which kind of identifier it cites, such as a CVE number. RFC 7522 OAuth SAML Profile Security Assertion Markup Language (SAML) 2.0 Profile for OAuth 2.0 Client Authentication and Authorization Grants How a signed SAML assertion can be traded for an OAuth 2.0 access token, or used to prove who a client is. RFC 7590 TLS in XMPP Use of Transport Layer Security (TLS) in the Extensible Messaging and Presence Protocol (XMPP) Updates XMPP's TLS rules: follow the current TLS best practices, and do not trust a server that fails to advertise TLS. RFC 7833 SAML over RADIUS A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML) Carries SAML assertions and messages inside RADIUS so federated identity can reach beyond the web. RFC 8270 SSH 2048-bit DH Minimum Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits Raises SSH Diffie-Hellman group size recommendations to at least 2048 bits. RFC 8295 EST Extensions EST (Enrollment over Secure Transport) Extensions New EST path components that let a PKI server hand a device its certificates, keys, firmware and trust anchors, guided by a package list. RFC 8471 Token Binding The Token Binding Protocol Version 1.0 A way to tie login cookies and tokens to a key that never leaves the user's device, so stolen tokens stop working. RFC 8472 Token Binding TLS Transport Layer Security (TLS) Extension for Token Binding Protocol Negotiation The TLS extension that lets a client and server agree on Token Binding version and key type during the handshake. RFC 8559 RADIUS CoA Proxying Dynamic Authorization Proxying in the Remote Authentication Dial-In User Service (RADIUS) Protocol How RADIUS Change-of-Authorization and Disconnect messages can travel back through proxies from a home network to the visited network. RFC 8588 PASSporT SHAKEN Personal Assertion Token (PaSSporT) Extension for Signature-based Handling of Asserted information using toKENs (SHAKEN) Two extra claims that let a phone carrier say how sure it is about a caller and where the call began. RFC 8619 HKDF Algorithm IDs Algorithm Identifiers for the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) Gives HKDF, a key derivation function, three official names so protocols can say which hash it uses. RFC 8709 SSH Ed25519/Ed448 Ed25519 and Ed448 Public Key Algorithms for the Secure Shell (SSH) Protocol Names and wire formats for using Ed25519 and Ed448 signatures as SSH public key algorithms. RFC 8732 GSS-API kex SHA-2 Generic Security Service Application Program Interface (GSS-API) Key Exchange with SHA-2 New SHA-2 and elliptic-curve key exchange methods for SSH sessions that authenticate through GSS-API, replacing SHA-1 ones. RFC 9115 ACME Delegated Certs An Automatic Certificate Management Environment (ACME) Profile for Generating Delegated Certificates How a CDN can get a certificate for your domain without ever holding your private key, and how you can cut it off. RFC 9118 STIR JWT Constraints Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates A certificate extension that lets a STIR certificate say which claims a signed call token must carry, may carry, or must never carry. RFC 9201 Additional OAuth Parameters for Authentication and Authorization for Constrained Environments (ACE) Three small parameters that say which key an ACE access token is bound to, and which key the resource server uses. RFC 9237 AIF An Authorization Information Format (AIF) for Authentication and Authorization for Constrained Environments (ACE) A compact allow-list format that tells a constrained device which resources a client may use and how. RFC 9244 DOTS Telemetry Distributed Denial-of-Service Open Threat Signaling (DOTS) Telemetry How a DDoS mitigation client and server share traffic baselines, attack details and mitigation status over DOTS. RFC 9336 Document Signing EKU X.509 Certificate General-Purpose Extended Key Usage (EKU) for Document Signing A dedicated label that says a certificate's key is meant for signing documents people will read. RFC 9348 IP-TFS YANG A YANG Data Model for IP Traffic Flow Security A standard YANG schema for configuring and monitoring IP Traffic Flow Security on IPsec tunnels. RFC 9430 ACE DTLS Profile for TLS Extension of the Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE) to Transport Layer Security (TLS) A tiny update that says the ACE DTLS profile works over TLS too, so constrained devices can fall back to TCP. RFC 9482 CMP over CoAP Constrained Application Protocol (CoAP) Transfer for the Certificate Management Protocol How small IoT devices can talk to a certificate authority using CoAP instead of HTTP. RFC 9493 SSE subject identifiers Subject Identifiers for Security Event Tokens A common JSON shape for saying who or what a security event is about, with named formats for emails, phone numbers and more. RFC 9528 EDHOC Ephemeral Diffie-Hellman Over COSE (EDHOC) A compact authenticated key exchange that lets tiny IoT devices agree on fresh keys in three small messages. RFC 9578 Privacy Pass issuance Privacy Pass Issuance Protocols How a client gets an anonymous Privacy Pass token from an issuer in a single request and response. RFC 9596 COSE typ header CBOR Object Signing and Encryption (COSE) "typ" (type) Header Parameter Adds a COSE header parameter that identifies the type of the complete COSE object. RFC 9662 Secure Syslog Ciphers Updates to the Cipher Suites in Secure Syslog Secure syslog gets a forward-secret cipher suite and drops DTLS 1.0, without cutting off older devices. RFC 9678 EAP-AKA' FS Forward Secrecy Extension to the Improved Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA' FS) An optional add-on that gives mobile network logins forward secrecy, so a stolen SIM key cannot unlock past sessions. RFC 9788 Email header protection Header Protection for Cryptographically Protected Email How to sign and encrypt the Subject and other email header fields, not just the message body, without breaking older mail clients. RFC 9814 SLH-DSA in CMS Use of the SLH-DSA Signature Algorithm in the Cryptographic Message Syntax (CMS) How to sign CMS messages with SLH-DSA, a post-quantum signature built only from hash functions. RFC 9865 SCIM cursor pagination Cursor-Based Pagination of System of Cross-domain Identity Management (SCIM) Resources Bookmark-style paging for SCIM, so servers built on cursors need not translate to page numbers. RFC 9881 ML-DSA in X.509 Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) How to put NIST's quantum-resistant ML-DSA signatures and keys into X.509 certificates and CRLs. RFC 2093 GKMP Specification Group Key Management Protocol (GKMP) Specification An experimental protocol for creating shared group keys and distributing them to authorized members. RFC 8446 TLS 1.3 The Transport Layer Security (TLS) Protocol Version 1.3 A major overhaul of TLS that removes legacy features, needs one round trip to set up, and requires forward secrecy. RFC 2818 HTTPS HTTP Over TLS Securing the web by layering HTTP over TLS, establishing the foundation for all secure web communication. RFC 1810 Report on MD5 Performance Measuring how fast MD5 can authenticate data in hardware and software, and what to do about it. RFC 2905 AAA Authorization Application Examples Real-world authorization needs from dial-up, mobile, printing, e-commerce, and education services. RFC 3127 AAA Protocol Evaluation Authentication, Authorization, and Accounting: Protocol Evaluation How a panel of the IETF working group scored four candidate protocols against the network access requirements RFC 3217 3DES and RC2 Key Wrap Triple-DES and RC2 Key Wrapping How one symmetric key is encrypted with another, with a checksum that catches a bad unwrap RFC 3329 SIP security agreement Security Mechanism Agreement for the Session Initiation Protocol (SIP) A secure way for a SIP phone and its first-hop server to agree on how to protect their conversation. RFC 3562 Key Management Considerations for the TCP MD5 Signature Option Key length, lifetime and sharing advice for the TCP MD5 Signature Option. RFC 3620 BEEP TUNNEL The TUNNEL Profile A BEEP profile that lets a peer act as an application-layer proxy, so authorized users can reach services through a firewall. RFC 3767 SACRED Securely Available Credentials Protocol A protocol for fetching your private keys and certificates from a credential server using any trusted workstation. RFC 4058 PANA Requirements Protocol for Carrying Authentication for Network Access (PANA) Requirements Requirements for carrying network-access authentication across different link technologies. RFC 4230 RSVP security RSVP Security Properties A survey of what RSVP's own security machinery protects, and the places it falls short. RFC 4387 PKIX over HTTP Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP Fetch certificates and revocation lists from a PKI repository with plain HTTP GET requests. RFC 4778 ISP Ops Security Operational Security Current Practices in Internet Service Provider Environments How large internet providers protect the routers and switches that run their networks. RFC 5114 Additional DH Groups Additional Diffie-Hellman Groups for Use with IETF Standards Parameters and test data for eight Diffie-Hellman groups used by IETF protocols. RFC 5169 HOKEY Re-Authentication Handover Key Management and Re-Authentication Problem Statement The case for reusing session keys when a phone moves, instead of starting over. RFC 5406 Guidelines for Specifying the Use of IPsec Version 2 Why writing 'just use IPsec' in a specification is not enough, and what a spec must say if it does choose IPsec. RFC 5408 IBE Architecture Identity-Based Encryption Architecture and Supporting Data Structures How to build and run an identity-based encryption system. RFC 5479 SRTP key management reqs Requirements and Analysis of Media Security Management Protocols What a protocol that agrees on SRTP encryption keys must handle, and how the keying methods of 2009 measured up. RFC 5489 ECDHE_PSK for TLS ECDHE_PSK Cipher Suites for Transport Layer Security (TLS) TLS cipher suites that combine a pre-shared key with ephemeral elliptic-curve key exchange RFC 5713 ANCP threats Security Threats and Security Requirements for the Access Node Control Protocol (ANCP) Who could attack the protocol between a provider's server and its street cabinet, and what it must do about them. RFC 5836 EAP Early Authentication Extensible Authentication Protocol (EAP) Early Authentication Problem Statement The problem of authenticating a phone at the network it is about to join, before it gets there. RFC 5997 Use of Status-Server Packets in the Remote Authentication Dial In User Service (RADIUS) Protocol A RADIUS message for checking a server without sending a login or accounting request. RFC 6024 Trust anchor management Trust Anchor Management Requirements What a protocol for installing and updating a device's list of trusted keys would have to do. RFC 6274 IPv4 security assessment Security Assessment of the Internet Protocol Version 4 What the designers of IPv4 did not think about, and the checks a router or host should make on every packet it takes in. RFC 6507 ECCSI Elliptic Curve-Based Certificateless Signatures for Identity-Based Encryption (ECCSI) A digital signature scheme where the public key comes from the signer's identity string, so no certificate is needed. RFC 6678 EAP Tunnel Requirements for a Tunnel-Based Extensible Authentication Protocol (EAP) Method What a protected EAP tunnel method must do before it can carry passwords, tokens and inner authentication methods. RFC 6755 OAuth URN namespace An IETF URN Sub-Namespace for OAuth A registered URN sub-namespace for OAuth-related specifications and parameters. RFC 6813 NEA Asokan Attack The Network Endpoint Assessment (NEA) Asokan Attack Analysis How an attacker can make a sick computer look healthy to a network access check, and how to stop it. RFC 6954 Brainpool-IKEv2 Using the Elliptic Curve Cryptography (ECC) Brainpool Curves for the Internet Key Exchange Protocol Version 2 (IKEv2) How to negotiate one of the four Brainpool elliptic curves for key exchange in IKEv2. RFC 7739 Security Implications of Predictable Fragment Identification Values Why IPv6 fragment IDs must not be predictable RFC 7824 Privacy Considerations for DHCPv6 Privacy risks from identifiers and other information carried in DHCPv6 messages. RFC 7918 TLS False Start Transport Layer Security (TLS) False Start A TLS client behavior that can send application data one round trip sooner RFC 7945 ICN Eval & Security Information-Centric Networking: Evaluation and Security Considerations Testing and securing a name-based networking approach RFC 8404 Pervasive encryption Effects of Pervasive Encryption on Operators How widespread encryption affects network operators' ability to manage, optimize, and secure networks. RFC 8903 DOTS use cases Use Cases for DDoS Open Threat Signaling Example scenarios showing how organizations coordinate to stop a distributed denial-of-service attack. RFC 9019 IoT Firmware Update A Firmware Update Architecture for Internet of Things An architecture for delivering and applying firmware updates to small, resource-constrained devices. RFC 9058 MGM Multilinear Galois Mode (MGM) An authenticated encryption mode that works with the GOST block ciphers and with any other block cipher. RFC 9106 Argon2 Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications A password hashing function that is deliberately hungry for memory, so attackers cannot cheaply guess at scale. RFC 9576 Privacy Pass arch. The Privacy Pass Architecture An architecture for proving you may enter, using a token that reveals nothing about who you are. RFC 9852 TLS 1.3 requirement New Protocols Using TLS Must Require TLS 1.3 New protocols that use TLS must make TLS 1.3 their default, and TLS 1.2 becomes an optional extra. RFC 9954 Hybrid key exchange TLS Hybrid Key Exchange in TLS 1.3 A TLS 1.3 construction that combines multiple key-exchange algorithms. RFC 4210 CMP Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) The online protocol a certificate authority and a client use to create and manage X.509 certificates. RFC 2409 IKE The Internet Key Exchange (IKE) The original key exchange for IPsec: two phases that set up a protected channel and then negotiate fresh keys. RFC 4269 SEED The SEED Encryption Algorithm A clarified description of the SEED block cipher and its key schedule. RFC 5126 CAdES CMS Advanced Electronic Signatures (CAdES) A signature format built on CMS that can still be proven valid years later, even if someone denies having signed. RFC 6091 OpenPGP in TLS Using OpenPGP Keys for Transport Layer Security (TLS) Authentication How a TLS client and server can agree to authenticate each other with OpenPGP keys instead of X.509 certificates. RFC 6150 MD4 Historic MD4 to Historic Status Why the MD4 hash algorithm was retired and RFC 1320 moved to Historic status. RFC 9411 NGFW Benchmarking Benchmarking Methodology for Network Security Device Performance How to test the speed of next-generation firewalls and intrusion prevention systems so results can be compared fairly. RFC 1447 SNMPv2 Party MIB Party MIB for version 2 of the Simple Network Management Protocol (SNMPv2) Managed objects that describe the parties, contexts and access rules of the SNMPv2 administrative model. RFC 4334 Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN) Certificate markers that tell a Wi-Fi or dial-up client which of its certificates fits which network. RFC 4752 Kerberos SASL The Kerberos V5 ("GSSAPI") Simple Authentication and Security Layer (SASL) Mechanism How a client and server use Kerberos V5 through GSS-API to authenticate inside the SASL framework. RFC 5090 RADIUS Digest RADIUS Extension for Digest Authentication New RADIUS attributes let a web or SIP server hand HTTP Digest checks to a central RADIUS server. RFC 6379 Suite B Cryptographic Suites for IPsec Four ready-made IPsec option bundles that line up with the NSA's Suite B algorithms. RFC 7802 Kerberos GSS-API PRF A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism How to derive extra key material from a Kerberos GSS-API security context, with the PRF+ counter fixed. RFC 7860 HMAC-SHA-2 for SNMPv3 HMAC-SHA-2 Authentication Protocols in User-Based Security Model (USM) for SNMPv3 Four stronger message-authentication options for SNMPv3, built on the SHA-2 hash family instead of MD5 and SHA-1. RFC 7930 Larger RADIUS Packets Larger Packets for RADIUS over TCP Lets RADIUS over TCP carry packets far bigger than the old 4096-octet limit, with a new error packet for when they are too big. RFC 8353 GSS-API Java update Generic Security Service API Version 2: Java Bindings Update The Java classes and methods for GSS-API version 2, now able to return an error token to the peer. RFC 9231 Additional XML Security Uniform Resource Identifiers (URIs) A corrected, updated list of the URIs that name algorithms and key types in XML signatures and encryption. RFC 9329 IKE/IPsec over TCP TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets How to carry IKE and ESP packets inside one TCP connection when a network blocks UDP. RFC 9598 Email addresses in X.509 Internationalized Email Addresses in X.509 Certificates How a certificate names an email address whose local part is not plain ASCII, and how to compare such names. RFC 9690 RSA-KEM in CMS Use of the RSA-KEM Algorithm in the Cryptographic Message Syntax (CMS) How to protect a message's encryption key with RSA-KEM, using the CMS KEMRecipientInfo structure. RFC 2222 SASL Simple Authentication and Security Layer (SASL) A way for a connection-based protocol to ask who is on the other end, and to encrypt what follows. RFC 2560 OCSP X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP Asking a server whether a certificate has been withdrawn, instead of downloading a list. RFC 4492 ECC for TLS Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Adding elliptic curve key exchange and signatures to TLS. RFC 2406 IPsec ESP IP Encapsulating Security Payload (ESP) The IPsec header that encrypts and authenticates the traffic it carries. RFC 4880 OpenPGP OpenPGP Message Format The byte-level format of OpenPGP keys, signatures and encrypted messages. RFC 1281 Secure Internet Operation Guidelines for the Secure Operation of the Internet The shared rules that everyone connected to the Internet was asked to follow. RFC 1636 Report of IAB Workshop on Security in the Internet Architecture - February 8-10, 1994 Workshop report on security challenges as the Internet adds new services. RFC 2268 RC2 A Description of the RC2(r) Encryption Algorithm A variable-key-size, 64-bit block cipher designed to run quickly on 16-bit microprocessors. RFC 2316 Report of the IAB Security Architecture Workshop A 1997 workshop report that argued security must be designed in, not bolted on. RFC 2504 Users' Security Handbook Plain advice for ordinary computer users on keeping their data, accounts and networks safe, written in 1999. RFC 2792 DSA and RSA Key and Signature Encoding for the KeyNote Trust Management System How KeyNote writes down RSA and DSA keys and signatures, so that every implementation reads them the same way. RFC 3157 SACRED Securely Available Credentials - Requirements What a protocol must do to let people move private keys and other credentials safely between their devices. RFC 3760 SACRED Securely Available Credentials (SACRED) - Credential Server Framework A framework for moving private keys safely between a user's devices RFC 4016 PANA Threat Analysis Protocol for Carrying Authentication and Network Access (PANA) Threat Analysis and Security Requirements The attacks a network-access login protocol must survive, and the eight rules that come out of them. RFC 4225 MIPv6 RO security Mobile IP Version 6 Route Optimization Security Design Background The reasoning behind Mobile IPv6 checks for direct routing to a mobile node. RFC 4284 EAP identity hints Identity Selection Hints for the Extensible Authentication Protocol (EAP) A way for the network to tell a wireless device which username it should use when the device cannot tell on its own. RFC 4891 Using IPsec to Secure IPv6-in-IPv4 Tunnels Protecting IPv6 traffic tunneled through IPv4 networks with IPsec. RFC 5193 PANA Framework Protocol for Carrying Authentication for Network Access (PANA) Framework The four pieces of a network access control system, and how a client gets authorised on it. RFC 5387 BTNS Problem Statement Problem and Applicability Statement for Better-Than-Nothing Security (BTNS) Why IPsec without peer authentication can still be better than no security, and when to use it. RFC 5409 IBE in CMS Using the Boneh-Franklin and Boneh-Boyen Identity-Based Encryption Algorithms with the Cryptographic Message Syntax (CMS) Carrying identity-based encryption inside the Cryptographic Message Syntax. RFC 5570 CALIPSO Common Architecture Label IPv6 Security Option (CALIPSO) Putting a security label on every IPv6 packet, so routers can enforce access rules. RFC 5647 AES-GCM for SSH AES Galois Counter Mode for the Secure Shell Transport Layer Protocol Using one algorithm to encrypt an SSH session and to prove the data was not altered. RFC 5794 ARIA A Description of the ARIA Encryption Algorithm A 128-bit block cipher from Korea, described in enough detail to implement. RFC 5856 ROHC over IPsec Integration of Robust Header Compression over IPsec Security Associations Compressing the headers inside an IPsec tunnel to cut the cost of encryption. RFC 6027 IPsec Cluster Problem Statement Why running IPsec on several gateways at once is hard, and the gaps that have to be closed first. RFC 6238 TOTP TOTP: Time-Based One-Time Password Algorithm How an authenticator app and a server agree on a six-digit code without talking to each other. RFC 6251 Kerberos over TLS Using Kerberos Version 5 over the Transport Layer Security (TLS) Protocol How a Kerberos client and its KDC can upgrade their TCP connection to TLS for privacy and extra authentication. RFC 6508 SAKKE Sakai-Kasahara Key Encryption (SAKKE) An identity-based encryption scheme where the receiver's identity string is enough for the sender to send it a shared secret. RFC 7027 Brainpool for TLS Elliptic Curve Cryptography (ECC) Brainpool Curves for Transport Layer Security (TLS) How to offer the Brainpool elliptic curves in TLS for authentication and key exchange. RFC 7253 OCB The OCB Authenticated-Encryption Algorithm A mode of operation that encrypts and authenticates in one pass over a block cipher. RFC 7664 Dragonfly Dragonfly Key Exchange A password-based key exchange that leaves an eavesdropper no password guess to test offline. RFC 7815 Minimal IKEv2 Minimal Internet Key Exchange Version 2 (IKEv2) Initiator Implementation The smallest IKEv2 initiator that still talks to a full server, for devices with little memory and power. RFC 7831 ABFAB Architecture Application Bridging for Federated Access Beyond Web (ABFAB) Architecture How federated sign-in can work for protocols other than HTTP, by reusing the pieces networks already run. RFC 8125 PAKE Requirements Requirements for Password-Authenticated Key Agreement (PAKE) Schemes What a designer of a password-based key exchange has to get right, and what it has to explain. RFC 8192 I2NSF Use Cases Interface to Network Security Functions (I2NSF): Problem Statement and Use Cases Why the industry wants one way to program firewalls and other security boxes, whoever made them. RFC 8645 Symmetric key re-keying Re-keying Mechanisms for Symmetric Keys Ways to let one symmetric key protect much more data than it safely could on its own. RFC 8744 SNI encryption problems Issues and Requirements for Server Name Identification (SNI) Encryption in TLS What an encrypted server name has to survive, and why the current work-around is not enough. RFC 9150 TLS 1.3 Authentication and Integrity-Only Cipher Suites Two TLS 1.3 cipher suites that authenticate and protect integrity without encrypting anything. RFC 9257 External PSKs in TLS Guidance for External Pre-Shared Key (PSK) Usage in TLS When a secret agreed in advance can safely secure TLS 1.3, and the rules that keep it safe. RFC 9496 ristretto255, decaf448 The ristretto255 and decaf448 Groups Safe prime-order elliptic curve groups for cryptographic protocols. RFC 9497 OPRF Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups Two-party protocols to compute with a server's key without revealing the input to the server or the key to the client. RFC 2402 IPsec AH IP Authentication Header The IPsec header that proves a packet came from where it claims and was not altered. RFC 5272 CMC Certificate Management over CMS (CMC) The message format a client and server use to ask for a certificate and to answer. RFC 4347 DTLS 1.0 Datagram Transport Layer Security TLS rebuilt for datagrams, so UDP applications can be encrypted without giving up their delivery semantics. RFC 1828 Keyed MD5 for AH IP Authentication using Keyed MD5 A keyed MD5 calculation for authenticating IP datagrams with AH. RFC 2085 HMAC-MD5 IP Auth HMAC-MD5 IP Authentication with Replay Prevention A keyed MD5 transform for the IP Authentication Header, with an optional counter against replayed packets. RFC 2243 OTP Extended Responses OTP Extended Responses A way for a one-time-password response to say how it is encoded, and to restart a password sequence. RFC 2444 OTP SASL The One-Time-Password SASL Mechanism How to plug one-time passwords into any SASL-enabled protocol in one standard way. RFC 2712 Kerberos in TLS Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) Lets a TLS connection authenticate with Kerberos tickets instead of public-key certificates. RFC 2947 Telnet 3DES CFB Telnet Encryption: DES3 64 bit Cipher Feedback How to protect a Telnet session with Triple-DES in cipher feedback mode, using 64-bit blocks. RFC 2948 Telnet 3DES OFB Telnet Encryption: DES3 64 bit Output Feedback How to protect a Telnet session with Triple-DES in output feedback mode, using 64-bit blocks. RFC 3537 HMAC Key Wrap Wrapping a Hashed Message Authentication Code (HMAC) key with a Triple-Data Encryption Standard (DES) Key or an Advanced Encryption Standard (AES) Key How to lock an HMAC key of any length inside a Triple-DES or AES key so it can be stored or sent safely. RFC 3585 IPsec Policy Model IPsec Configuration Policy Information Model A shared object-oriented blueprint for describing IPsec rules, so storage formats and tools can all mean the same thing. RFC 3586 IPSP IP Security Policy (IPSP) Requirements What a framework for managing, discovering and negotiating IPsec security policy must provide. RFC 3657 Camellia CMS Use of the Camellia Encryption Algorithm in Cryptographic Message Syntax (CMS) Object identifiers and key-wrap rules that let the Camellia cipher protect content in CMS messages. RFC 3923 XMPP E2E Encryption End-to-End Signing and Object Encryption for the Extensible Messaging and Presence Protocol (XMPP) How XMPP clients can sign and encrypt messages and presence end to end using S/MIME wrapped in an e2e element. RFC 3943 TLS LZS Compression Transport Layer Security (TLS) Protocol Compression Using Lempel-Ziv-Stac (LZS) How to squeeze TLS record payloads with the Lempel-Ziv-Stac algorithm, using compression method number 64. RFC 4010 SEED in CMS Use of the SEED Encryption Algorithm in Cryptographic Message Syntax (CMS) How to plug Korea's SEED block cipher into CMS for encrypting content and wrapping keys. RFC 4109 IKEv1 Algorithms Algorithms for Internet Key Exchange version 1 (IKEv1) Updated requirements for the cryptographic algorithms supported by IKEv1 implementations. RFC 4256 SSH keyboard-interactive Generic Message Exchange Authentication for the Secure Shell Protocol (SSH) One SSH login method where the server sends the prompts and the client just shows them and passes back the answers. RFC 4312 Camellia for IPsec The Camellia Cipher Algorithm and Its Use With IPsec How to use the Camellia block cipher in CBC mode to keep IPsec ESP packets confidential. RFC 4344 SSH Encryption Modes The Secure Shell (SSH) Transport Layer Encryption Modes New counter-mode ciphers for SSH, plus firm advice on how often to swap encryption keys. RFC 4401 GSS-API PRF A Pseudo-Random Function (PRF) API Extension for the Generic Security Service Application Program Interface (GSS-API) A GSS-API function that turns an established security context into fresh keying material for other protocols. RFC 4430 KINK Kerberized Internet Negotiation of Keys (KINK) How two hosts use Kerberos tickets to set up IPsec security associations in as few as two messages. RFC 4442 TESLA bootstrapping Bootstrapping Timed Efficient Stream Loss-Tolerant Authentication (TESLA) How a receiver gets the starting settings and first key for TESLA multicast authentication, carried inside MIKEY. RFC 4490 GOST with CMS Using the GOST 28147-89, GOST R 34.11-94, GOST R 34.10-94, and GOST R 34.10-2001 Algorithms with Cryptographic Message Syntax (CMS) How to plug four Russian GOST algorithms into the Cryptographic Message Syntax used for signed and encrypted messages. RFC 4534 GSPT Group Security Policy Token v1 A signed, ASN.1-encoded rulebook that tells every member of a secure multicast group which security mechanisms the group uses. RFC 4615 AES-CMAC-PRF-128 The Advanced Encryption Standard-Cipher-based Message Authentication Code-Pseudo-Random Function-128 (AES-CMAC-PRF-128) Algorithm for the Internet Key Exchange Protocol (IKE) A pseudo-random function built on AES-CMAC that lets IKEv2 use AES with keys of any length. RFC 4806 OCSP Extensions to IKEv2 Online Certificate Status Protocol (OCSP) Extensions to IKEv2 How IKEv2 peers can swap a small OCSP answer instead of a huge revocation list to prove a certificate is still good. RFC 4849 NAS-Filter-Rule RADIUS Filter Rule Attribute A RADIUS attribute that carries actual packet filter rules to an access server instead of just naming a preconfigured filter. RFC 5179 Generic Security Service Application Program Interface (GSS-API) Domain-Based Service Names Mapping for the Kerberos V GSS Mechanism Maps domain-based GSS-API service names into Kerberos V principal names. RFC 5433 EAP-GPSK Extensible Authentication Protocol - Generalized Pre-Shared Key (EAP-GPSK) Method A lightweight way for two parties that already share a secret key to prove it to each other and derive fresh session keys. RFC 5529 Camellia for IPsec Modes of Operation for Camellia for Use with IPsec How the Camellia cipher plugs into IPsec as an optional alternative, in CBC, CTR and CCM modes. RFC 5619 Softwire security Softwire Security Analysis and Requirements Which attacks threaten softwire tunnels, and which protections, mostly IPsec, an implementation has to provide. RFC 5749 Distribution of EAP-Based Keys for Handover and Re-Authentication How an EAP server hands derived root keys to other servers so a device can re-authenticate quickly after a handover. RFC 5756 Updates for RSAES-OAEP and RSASSA-PSS Algorithm Parameters A small fix to how RSA-OAEP and RSA-PSS parameters appear in X.509 certificates. RFC 5816 ESSCertIDv2 for TSP ESSCertIDv2 Update for RFC 3161 Allows RFC 3161 time-stamp tokens to identify signer certificates using ESSCertIDv2. RFC 5840 WESP Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility A small wrapper header that lets network devices see at a glance whether an IPsec ESP packet is encrypted. RFC 5998 An Extension for EAP-Only Authentication in IKEv2 Lets IKEv2 authenticate the gateway with a strong EAP method alone, without a public key signature. RFC 6010 CMS Content Constraints Cryptographic Message Syntax (CMS) Content Constraints Extension A certificate extension that says which kinds of signed content a public key is allowed to vouch for. RFC 6042 TLS KeyNote Transport Layer Security (TLS) Authorization Using KeyNote How to send KeyNote credentials during a TLS handshake, either inline or by URL. RFC 6054 Using Counter Modes with Encapsulating Security Payload (ESP) and Authentication Header (AH) to Protect Group Traffic How many senders can share one IPsec key with counter-mode ciphers without ever repeating an IV. RFC 6063 DSKPP Dynamic Symmetric Key Provisioning Protocol (DSKPP) How a security token or app gets its secret key from a provisioning server, either agreed jointly or delivered in protected form. RFC 6072 Certificate Management Service for the Session Initiation Protocol (SIP) A SIP service that hands out users' certificates, and optionally their private keys, so end-to-end encryption becomes practical. RFC 6111 Additional Kerberos Naming Constraints Reserves 'WELLKNOWN' Kerberos names for special meanings and says what servers must do when they do not support one. RFC 6160 Algorithms for Cryptographic Message Syntax (CMS) Protection of Symmetric Key Package Content Types Algorithm support requirements for CMS protection of symmetric key packages. RFC 6209 ARIA TLS Addition of the ARIA Cipher Suites to Transport Layer Security (TLS) TLS cipher suites that add the ARIA block cipher, with SHA-2 hashes, Galois Counter Mode and pre-shared key variants. RFC 6311 IKEv2/IPsec HA Protocol Support for High Availability of IKEv2/IPsec How a standby VPN gateway takes over mid-session without its IKEv2 and IPsec counters falling out of step with the peer. RFC 6495 SEND SKI name types Subject Key Identifier (SKI) SEcure Neighbor Discovery (SEND) Name Type Fields New SEND Trust Anchor name types based on certificate Subject Key Identifiers. RFC 6542 Krb5 Channel Binding Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Channel Binding Hash Agility Lets the Kerberos GSS-API mechanism tie a login to a connection using a negotiated algorithm instead of MD5. RFC 6560 Kerberos OTP Pre-Auth One-Time Password (OTP) Pre-Authentication How a Kerberos client proves who it is with a code that works only once, instead of a reusable password. RFC 7171 PT-EAP PT-EAP: Posture Transport (PT) Protocol for Extensible Authentication Protocol (EAP) Tunnel Methods A tiny EAP method that carries endpoint health reports inside a protected tunnel before a device joins the network. RFC 7562 TLS DTCP Authorization Transport Layer Security (TLS) Authorization Using Digital Transmission Content Protection (DTCP) Certificates How a device can present its DTCP certificate during a TLS handshake, using the TLS authorization extensions. RFC 7628 SASL for OAuth A Set of Simple Authentication and Security Layer (SASL) Mechanisms for OAuth Two SASL mechanisms that let email and similar non-HTTP protocols log in with an OAuth token instead of a password. RFC 7634 ChaCha20 for IPsec ChaCha20, Poly1305, and Their Use in the Internet Key Exchange Protocol (IKE) and IPsec How IPsec and IKEv2 use ChaCha20-Poly1305 as a standby cipher alongside AES. RFC 7670 IKEv2 Raw Public Keys Generic Raw Public-Key Support for IKEv2 Lets IKEv2 carry any kind of raw public key, not just RSA, by sending a SubjectPublicKeyInfo structure. RFC 7751 Kerberos Authorization Data Container Authenticated by Multiple Message Authentication Codes (MACs) A Kerberos ticket container that carries several checksums, so both the KDC and services can check the authorization data inside. RFC 8052 GDOI for IEC 62351 Group Domain of Interpretation (GDOI) Protocol Support for IEC 62351 Security Services How GDOI hands out group keys and policy for IEC 61850 messages in power substations. RFC 8070 PKINIT Freshness Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Freshness Extension A KDC-issued freshness token that proves a Kerberos PKINIT client holds its private key right now, not just that it used it once. RFC 8230 RSA for COSE Using RSA Algorithms with CBOR Object Signing and Encryption (COSE) Messages The identifiers and key formats that let COSE messages use RSA signatures and RSA key encryption. RFC 8419 EdDSA CMS Use of Edwards-Curve Digital Signature Algorithm (EdDSA) Signatures in the Cryptographic Message Syntax (CMS) How to sign CMS messages with the modern Ed25519 and Ed448 signature algorithms. RFC 8449 TLS Record Size Limit Record Size Limit Extension for TLS A TLS extension that lets each side tell the other the largest protected record it is willing to receive. RFC 8598 IKEv2 Split DNS Split DNS Configuration for the Internet Key Exchange Protocol Version 2 (IKEv2) How an IKEv2 VPN can tell a client which domain names to look up through the tunnel and which to leave alone. RFC 8636 PKINIT algorithm agility Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility Lets Kerberos public-key logins negotiate their key derivation function and discover which hash algorithms a server accepts. RFC 8657 CAA account and method Certification Authority Authorization (CAA) Record Extensions for Account URI and Automatic Certificate Management Environment (ACME) Method Binding Two CAA parameters that let a domain name the exact CA account, and the exact validation method, allowed to get its certificates. RFC 8693 OAuth token exchange OAuth 2.0 Token Exchange How a client trades one security token for another, optionally to act on someone else's behalf. RFC 8738 ACME IP identifiers Automated Certificate Management Environment (ACME) IP Identifier Validation Extension ACME can validate control of IP addresses for certificate requests. RFC 8750 Implicit IV for ESP Implicit Initialization Vector (IV) for Counter-Based Ciphers in Encapsulating Security Payload (ESP) Saves 8 bytes per IPsec packet by building the cipher's IV from the sequence number instead of sending it. RFC 8760 SIP Digest auth The Session Initiation Protocol (SIP) Digest Access Authentication Scheme SIP Digest authentication gets stronger hash algorithms such as SHA-256 so MD5 is no longer the only option. RFC 8778 HSS/LMS in COSE Use of the HSS/LMS Hash-Based Signature Algorithm with CBOR Object Signing and Encryption (COSE) How to sign COSE messages with HSS/LMS hash-based signatures, which are designed to survive quantum computers. RFC 8844 Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP) How an attacker can make a caller think they reached the wrong person over DTLS-SRTP, and the two TLS extensions that stop it. RFC 8870 EKT Encrypted Key Transport for DTLS and Secure RTP Carries each sender's SRTP key inside its own packets, wrapped in a group key delivered over DTLS. RFC 8879 TLS cert compression TLS Certificate Compression Shrinking the certificate chain in a TLS 1.3 handshake with zlib, Brotli or Zstandard. RFC 8933 CMS Algorithm Protection Update to the Cryptographic Message Syntax (CMS) for Algorithm Identifier Protection Closes a gap in CMS signatures so attackers cannot swap the hash algorithm behind a signed message. RFC 8940 EAP Session-Id Extensible Authentication Protocol (EAP) Session-Id Derivation for EAP Subscriber Identity Module (EAP-SIM), EAP Authentication and Key Agreement (EAP-AKA), and Protected EAP (PEAP) Fills the gaps in how EAP-SIM, EAP-AKA and PEAP name a session, including after a fast reconnect. RFC 8973 DOTS Discovery DDoS Open Threat Signaling (DOTS) Agent Discovery How a DDoS signaling client finds the server to ask for help, using DHCP, DNS records or DNS service discovery. RFC 9044 AES-GMAC in CMS Using the AES-GMAC Algorithm with the Cryptographic Message Syntax (CMS) The identifiers and parameters for using the AES-GMAC authentication code inside CMS messages. RFC 9068 JWT Access Tokens JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens A standard layout for OAuth 2.0 access tokens issued as JWTs, so servers from different vendors can issue and check them the same way. RFC 9126 OAuth PAR OAuth 2.0 Pushed Authorization Requests A way for an OAuth client to hand its authorization request straight to the server and get back a short reference to use instead. RFC 9173 BPSec Contexts Default Security Contexts for Bundle Protocol Security (BPSec) The two ready-made security recipes, HMAC integrity and AES-GCM encryption, for securing Bundle Protocol traffic. RFC 9207 OAuth 2.0 Authorization Server Issuer Identification A one-parameter fix that lets an OAuth client check which authorization server actually sent a response. RFC 9278 JWK Thumbprint URI JWK Thumbprint URI A URN prefix that lets a JWK Thumbprint be used wherever an identifier must be a URI. RFC 9289 Encrypted RPC Towards Remote Procedure Call Encryption by Default How ONC RPC peers can upgrade to TLS on the same port, falling back gracefully when the other side cannot. RFC 9345 Delegated Credentials Delegated Credentials for TLS and DTLS Let a TLS server mint its own short-lived signing credentials from its certificate, without going back to the CA. RFC 9349 IP-TFS MIB Definitions of Managed Objects for IP Traffic Flow Security A read-only SNMP MIB for watching IP Traffic Flow Security on IPsec tunnels. RFC 9360 COSE X.509 Headers CBOR Object Signing and Encryption (COSE): Header Parameters for Carrying and Referencing X.509 Certificates Four header parameters that let a COSE message carry an X.509 certificate or point to one. RFC 9396 OAuth RAR OAuth 2.0 Rich Authorization Requests A JSON parameter that lets OAuth clients ask for precise permissions instead of coarse scope strings. RFC 9447 ACME authority token Automated Certificate Management Environment (ACME) Challenges Using an Authority Token A generic ACME challenge where a certificate applicant proves its right to a name by presenting a signed token from the authority that owns that namespace. RFC 9448 TNAuthList ACME profile TNAuthList Profile of Automated Certificate Management Environment (ACME) Authority Token How a phone provider proves, through ACME, that it may get a certificate for particular telephone numbers. RFC 9459 COSE AES-CTR and CBC CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC How to use plain AES counter and CBC encryption in COSE, for cases where something else already protects integrity. RFC 9509 EKU for 5G NFs X.509 Certificate Extended Key Usage (EKU) for 5G Network Functions Three new certificate purpose labels so 5G network functions can prove a key is for signing tokens or encrypting JSON, and nothing else. RFC 9575 DRIP DET authentication DRIP Entity Tag (DET) Authentication Formats and Protocols for Broadcast Remote Identification (RID) Signed drone broadcasts that nearby observers can check, even with no Internet connection. RFC 9597 CWT claims in COSE CBOR Web Token (CWT) Claims in COSE Headers A COSE header parameter that carries CWT claims outside the payload, readable before decryption. RFC 9635 GNAP Grant Negotiation and Authorization Protocol (GNAP) A newer, key-bound way for software to ask for permission, negotiated step by step with an authorization server. RFC 9646 SZTP CSR Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request How a new network device asks for its own identity certificate while it is first being set up. RFC 9679 COSE Key Thumbprint CBOR Object Signing and Encryption (COSE) Key Thumbprint A fingerprint for a COSE key: hash only the required fields, in a fixed encoding, to get a stable name for the key. RFC 9684 CHARRA YANG Model A YANG Data Model for Challenge-Response-Based Remote Attestation (CHARRA) Procedures Using Trusted Platform Modules (TPMs) A standard YANG interface for asking a network device to prove, with a TPM-signed quote, what software it booted. RFC 9781 UCCS CBOR tag A Concise Binary Object Representation (CBOR) Tag for Unprotected CBOR Web Token Claims Sets (UCCS) A CBOR tag for sending CWT claims without a signature, when a secure channel already protects them. RFC 9802 HSS and XMSS in X.509 Use of the HSS and XMSS Hash-Based Signature Algorithms in Internet X.509 Public Key Infrastructure How to name and encode HSS, XMSS and XMSS^MT hash-based signature keys in X.509 certificates and CRLs. RFC 9827 IKEv2 SN rename Renaming the Extended Sequence Numbers (ESN) Transform Type in the Internet Key Exchange Protocol Version 2 (IKEv2) IKEv2 Transform Type 5 stops being only about 'extended' sequence numbers and becomes a general way to describe IPsec sequence numbers. RFC 9867 PPK in IKE_INTERMEDIATE Mixing Preshared Keys in the IKE_INTERMEDIATE and CREATE_CHILD_SA Exchanges of the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-Quantum Security Mixing a post-quantum preshared key into IKEv2 earlier, so even the initial IKE SA is protected, and again later when rekeying. RFC 9901 SD-JWT Selective Disclosure for JSON Web Tokens Sign a token once, then let its owner reveal only the claims each recipient needs. RFC 9909 SLH-DSA in X.509 Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA) How to put hash-based, quantum-resistant SLH-DSA signatures and keys into X.509 certificates and CRLs. RFC 9921 COSE RFC 3161 timestamps CBOR Object Signing and Encryption (COSE) Header Parameter for Timestamp Tokens as Defined in RFC 3161 Two COSE header parameters that carry an RFC 3161 timestamp token inside a signed COSE message. RFC 9925 Unsigned X.509 certs Unsigned X.509 Certificates A standard blank signature for X.509 certificates that carry subject information but have no real issuer. RFC 9934 PEM for ECH Privacy-Enhanced Mail (PEM) File Format for Encrypted ClientHello (ECH) A PEM file format for configuring Encrypted ClientHello keys on TLS servers. RFC 9939 PKCS #8 content types PKCS #8: Private-Key Information Content Types Gives private-key files two official identifiers so they can travel inside CMS messages. RFC 9943 SCITT architecture An Architecture for Trustworthy and Transparent Digital Supply Chains A common notary-style architecture that makes signed statements about supply chain artifacts publicly auditable. RFC 9944 SCIM device schema Device Schema Extensions to the System for Cross-Domain Identity Management (SCIM) Model Extends SCIM from provisioning people to provisioning devices, with schemas for BLE, Wi-Fi Easy Connect, FDO, MAB and Zigbee. RFC 9963 RSA PKCS1 in TLS 1.3 Legacy RSASSA-PKCS1-v1_5 Code Points for TLS 1.3 Three TLS 1.3 code points so old hardware keys can still sign client certificate handshakes. RFC 9964 ML-DSA in JOSE and COSE ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) How to sign JSON and CBOR messages with ML-DSA, a signature scheme designed to resist future quantum computers. RFC 9980 PQC in OpenPGP Post-Quantum Cryptography in OpenPGP New OpenPGP key types that pair post-quantum algorithms with elliptic curves, so a future quantum computer cannot read or forge the traffic. RFC 9987 SSH agent protocol Secure Shell (SSH) Agent Protocol How SSH clients ask a separate agent process to hold private keys and sign on their behalf. RFC 9995 COSE hash envelope CBOR Object Signing and Encryption (COSE) Hash Envelope Sign a hash of a document instead of the document, and say where to find the original. RFC 9999 RATS CMW Remote ATtestation procedureS (RATS) Conceptual Message Wrapper (CMW) A common envelope that labels and carries remote attestation messages in CBOR, JSON, JWT, CWT and X.509 formats. RFC 10013 EAT measured component Entity Attestation Token (EAT) Measured Component A common record for the fingerprint of one piece of firmware or software, ready to ride inside an Entity Attestation Token. RFC 10024 Hybrid ML-KEM for TLS Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3 Three TLS 1.3 key agreement groups that pair post-quantum ML-KEM with a classic elliptic curve exchange. RFC 10031 MAC addresses in X.509 Media Access Control (MAC) Addresses in X.509 Certificates A standard way to put a device's hardware (MAC) address into an X.509 certificate, and to constrain it. RFC 4366 TLS Extensions Transport Layer Security (TLS) Extensions How new features are added to a TLS handshake without breaking the clients and servers already deployed. RFC 8422 ECC for TLS 1.2 Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier How a TLS handshake can agree a shared secret on an elliptic curve, and sign the agreement to prove who is talking. RFC 2284 PPP EAP PPP Extensible Authentication Protocol (EAP) A PPP authentication protocol that leaves the choice of how to prove identity until the moment it is needed. RFC 2574 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) Message-level security for network management: who sent this, was it altered, and is it still fresh. RFC 2829 LDAP authentication Authentication Methods for LDAP Which ways of proving who you are an LDAP server must accept. RFC 6125 TLS Server Identity Representation and Verification of Domain-Based Application Service Identity within Internet PKI Using X.509 Certificates How a client decides that the certificate it was given really names the service it asked for. RFC 2830 LDAP over TLS Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security The operation that turns an ordinary LDAP connection into an encrypted one. RFC 5070 IODEF The Incident Object Description Exchange Format A common XML format for the incident reports that security teams exchange with each other. RFC 4474 SIP identity Enhancements for Authenticated Identity Management in the Session Initiation Protocol (SIP) A signed Identity header lets a domain vouch for who really sent a SIP request. RFC 2521 ICMP Security Failures Messages The ICMP message a host sends back when a packet protected by IPsec cannot be accepted. RFC 2693 SPKI Theory SPKI Certificate Theory The theory behind certificates whose job is to say what a key is allowed to do. RFC 2903 Generic AAA Generic AAA Architecture One server for the checks every access system makes, with the details of each application left to a plug-in module. RFC 3125 Signature Policies Electronic Signature Policies A written rulebook for creating and checking electronic signatures, so both sides reach the same verdict. RFC 4765 IDMEF The Intrusion Detection Message Exchange Format (IDMEF) A common XML format that lets intrusion detection tools report alerts and heartbeats to the same consoles. RFC 6023 A Childless Initiation of the Internet Key Exchange Version 2 (IKEv2) Security Association (SA) An IKEv2 extension that sets up and authenticates a security association without also creating a Child SA. RFC 6496 Secure Proxy ND Secure Proxy ND Support for SEcure Neighbor Discovery (SEND) Letting a router answer neighbour discovery for another node, with a signature that proves it was allowed to. RFC 7499 RADIUS Fragmentation Support of Fragmentation of RADIUS Packets A way to send large amounts of authorization data by splitting RADIUS packets across multiple exchanges. RFC 7585 RADIUS Dynamic Discovery Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Based on the Network Access Identifier (NAI) Finding the RADIUS server that owns a user's realm by asking DNS, then proving the server is allowed to answer. RFC 9986 Keyed ISAAC BFD Meticulous Keyed ISAAC for Bidirectional Forwarding Detection (BFD) Optimized Authentication A cheap way to prove a BFD session is still up, without hashing every packet. RFC 2630 CMS Cryptographic Message Syntax A syntax for putting digital signatures, digests, encryption and message authentication codes into one envelope. RFC 4282 NAI The Network Access Identifier The syntax for the user identity a client sends when it asks a network for access, so a roaming provider can be identified. RFC 4386 PKIX Repository Locator Internet X.509 Public Key Infrastructure Repository Locator Service How a certificate-using program can find a domain's PKI repository by asking DNS for an SRV record. RFC 6071 IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap A map of the many RFCs that define IP security and key exchange, and where the old and new versions differ. RFC 6149 MD2 Historic MD2 to Historic Status Why the MD2 message-digest algorithm and its original RFC were retired. RFC 6331 Moving DIGEST-MD5 to Historic The case against DIGEST-MD5, the SASL mechanism that this document moves to Historic. RFC 5273 CMC Transport Certificate Management over CMS (CMC): Transport Protocols Four ways to move CMC certificate request and response messages: files, mail, HTTP and plain TCP. RFC 1825 IP Security Architecture Security Architecture for the Internet Protocol The overall design for securing IP: two headers, a set of security associations, and rules for managing keys. RFC 8996 Deprecate TLS 1.0/1.1 Deprecating TLS 1.0 and TLS 1.1 The IETF formally retires TLS 1.0, TLS 1.1 and DTLS 1.0 and says implementations must not negotiate them. RFC 2459 X.509 PKI Profile Internet X.509 Public Key Infrastructure Certificate and CRL Profile The Internet profile of the X.509 v3 certificate and the X.509 v2 certificate revocation list. RFC 1750 Randomness Randomness Recommendations for Security Why ordinary pseudo-random generators fail for security, and what to use instead. RFC 1826 IP Authentication Header IP Authentication Header An IP header that proves a datagram was not altered on the way, and where it came from. RFC 2138 RADIUS Remote Authentication Dial In User Service (RADIUS) How a dial-in server asks a shared server whether a user may connect, and what service to give them. RFC 4013 SASLprep SASLprep: Stringprep Profile for User Names and Passwords A preparation profile that rewrites Unicode user names and passwords into one canonical form before they are compared. RFC 3447 RSA Cryptography Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1 The reference specification for RSA encryption and signatures, republished from RSA Laboratories as PKCS #1 v2.1. RFC 5274 CMC Compliance Certificate Management Messages over CMS (CMC): Compliance Requirements The checklist of what a certificate-enrollment client, registration authority or CA must support to count as compliant CMC. RFC 6712 CMP over HTTP Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP) How to carry certificate management messages over plain HTTP POST requests. RFC 4345 SSH Arcfour Improved Arcfour Modes for the Secure Shell (SSH) Transport Layer Protocol Two SSH Arcfour modes that skip the cipher's weak initial keystream bytes. RFC 6101 SSL 3.0 The Secure Sockets Layer (SSL) Protocol Version 3.0 A historical record of the protocol that gave the web its encrypted connections, and the basis for TLS. RFC 6380 Suite B Profile for Internet Protocol Security (IPsec) The rules for using the NSA's Suite B algorithms inside IPsec, including which curves and key sizes go with which security level. RFC 7170 TEAP Tunnel Extensible Authentication Protocol (TEAP) Version 1 A standards-track EAP method that builds a TLS tunnel first, then does the real authentication inside it. RFC 8152 COSE CBOR Object Signing and Encryption (COSE) Sign, encrypt, and MAC data in the compact CBOR format for IoT and constrained devices. RFC 1511 Common Authentication Technology Overview An overview of the IETF Common Authentication Technology working group's approach. RFC 1675 Security Concerns for IPng A review of security concerns raised by candidate IPng designs. RFC 1827 IP ESP IP Encapsulating Security Payload (ESP) Encrypted packets for secure IP communication. RFC 2040 RC5 Algorithms The RC5, RC5-CBC, RC5-CBC-Pad, and RC5-CTS Algorithms The RC5 cipher and its three modes of use, written out step by step so two implementations agree. RFC 2286 HMAC-RIPEMD Test Cases Test Cases for HMAC-RIPEMD160 and HMAC-RIPEMD128 Test vectors for checking HMAC message authentication with RIPEMD hash functions. RFC 2367 PF_KEY PF_KEY Key Management API, Version 2 A system call interface for managing cryptographic keys in the kernel. RFC 2528 Internet X.509 Public Key Infrastructure Representation of Key Exchange Algorithm (KEA) Keys in Internet X.509 Public Key Infrastructure Certificates How to encode Key Exchange Algorithm keys inside standard X.509 digital certificates. RFC 3078 MPPE Microsoft Point-To-Point Encryption (MPPE) Protocol Encrypts Point-to-Point Protocol packets using the RC4 algorithm. RFC 3112 LDAP Authentication Password Schema A schema for storing passwords in an LDAP directory so that the stored form can be a hash rather than the password itself. RFC 3129 Kerberized IKE Requirements for Kerberized Internet Negotiation of Keys Using a trusted server instead of peer-to-peer to negotiate secure connections RFC 3379 DPV and DPD requirements Delegated Path Validation and Delegated Path Discovery Protocol Requirements Requirements for letting servers validate certificates and collect certificate information on behalf of clients. RFC 3457 IPsec remote access Requirements for IPsec Remote Access Scenarios Security requirements for different ways employees and partners access corporate networks. RFC 3792 Survey of IPv4 Addresses in Currently Deployed IETF Security Area Standards Track and Experimental Documents A catalog of IPv4 address dependencies in security standards. RFC 3874 SHA-224 A 224-bit One-way Hash Function: SHA-224 A 224-bit hash function made by starting SHA-256 from different numbers and dropping the last word. RFC 4050 ECDSA for XML Signatures Using the Elliptic Curve Signature Algorithm (ECDSA) for XML Digital Signatures How to sign XML with the elliptic curve signature algorithm, and how to carry the key in the document. RFC 4212 Alt Cert Formats Alternative Certificate Formats for the Public-Key Infrastructure Using X.509 (PKIX) Certificate Management Protocols How to ask a PKIX certificate authority for attribute or OpenPGP certificates using the same request syntax as X.509. RFC 4595 IKEv2 for Fibre Channel Use of IKEv2 in the Fibre Channel Security Association Management Protocol Adapting IKEv2 to secure Fibre Channel networks RFC 4672 RADIUS DAC MIB RADIUS Dynamic Authorization Client MIB Management objects for RADIUS Dynamic Authorization Client side. RFC 4673 RADIUS DAS MIB RADIUS Dynamic Authorization Server MIB Management objects for RADIUS Dynamic Authorization Server side. RFC 4758 CT-KIP Cryptographic Token Key Initialization Protocol (CT-KIP) Version 1.0 Revision 1 Protocol for securely initializing cryptographic tokens with shared keys. RFC 4766 IDWG Requirements Intrusion Detection Message Exchange Requirements Specification requirements for exchanging intrusion detection alerts between systems. RFC 4768 Desired Enhancements to Generic Security Services Application Program Interface (GSS-API) Version 3 Naming Enhancements to the naming and authorization architecture of GSS-API. RFC 4772 Security Implications of Using the Data Encryption Standard (DES) Why DES encryption is no longer safe and what to use instead. RFC 5197 MIKEY applicability On the Applicability of Various Multimedia Internet KEYing (MIKEY) Modes and Extensions Comparing the ways to hand off secret keys for encrypted calls. RFC 5349 Elliptic Curve Cryptography (ECC) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Using elliptic curves for Kerberos public-key login RFC 5528 Camellia CTR and CCM Camellia Counter Mode and Camellia Counter with CBC-MAC Mode Algorithms Test vectors for two encryption modes of the Camellia block cipher RFC 5609 PANA state machines State Machines for the Protocol for Carrying Authentication for Network Access (PANA) State machine specifications for PANA client and authentication agent protocol implementations. RFC 5708 X.509 Key and Signature Encoding for the KeyNote Trust Management System How KeyNote credentials can name an X.509 certificate as a key, and which hash functions their signatures may use. RFC 5937 Using Trust Anchor Constraints during Certification Path Processing How to enforce limits on what a trusted certificate signer can certify RFC 5941 Thraud Sharing Transaction Fraud Data A standardized format for reporting fraudulent financial transactions RFC 6229 RC4 test vectors Test Vectors for the Stream Cipher RC4 Known-answer keystream outputs that let implementers check whether their RC4 code is correct. RFC 6404 SPEERMINT threats Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures Catalogs security risks when SIP service providers peer to exchange voice calls and proposes concrete safeguards. RFC 6421 Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS) What a RADIUS solution must support to change cryptographic algorithms safely. RFC 6509 MIKEY-SAKKE MIKEY-SAKKE: Sakai-Kasahara Key Encryption in Multimedia Internet KEYing (MIKEY) Identity-based key exchange for multimedia calls with built-in source authentication. RFC 6561 ISP Bot Remediation Recommendations for the Remediation of Bots in ISP Networks How internet providers can detect and help users clean infected computers. RFC 7029 Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding Why EAP tunnel methods need to protect the peer as well as the server, and how EMSK-based binding does it. RFC 7123 IPv6 on IPv4 Networks Security Implications of IPv6 on IPv4 Networks Why a network that thinks it is IPv4-only can still be attacked over IPv6, and how to filter it. RFC 7194 IRC over TLS Port Default Port for Internet Relay Chat (IRC) via TLS/SSL Writes down the common practice of running encrypted IRC on TCP port 6697. RFC 7251 AES-CCM ECC for TLS AES-CCM Elliptic Curve Cryptography (ECC) Cipher Suites for TLS Compact encryption recipes for small devices and limited bandwidth networks. RFC 7406 Extensions to the Emergency Services Architecture for Dealing With Unauthenticated and Unauthorized Devices How emergency callers without accounts or service can still reach 911 RFC 7632 Endpoint Security Posture Assessment: Enterprise Use Cases Use cases for collecting data from endpoints and checking it against policy, as groundwork for common standards. RFC 7693 BLAKE2 The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC) A hash function with a built-in key, so one algorithm covers both checksums and message authentication. RFC 8134 MILE Report Management Incident Lightweight Exchange (MILE) Implementation Report A survey of how the incident-sharing standards from IETF are actually being implemented RFC 8146 EAP-pwd Salted Adding Support for Salted Password Databases to EAP-pwd How EAP-pwd can authenticate against password databases that store salted hashes instead of plain passwords. RFC 8235 Schnorr NIZK Proof Schnorr Non-interactive Zero-Knowledge Proof Prove you know a secret without revealing it. RFC 8274 IODEF Usage Guidance Incident Object Description Exchange Format Usage Guidance A handbook for implementing incident sharing with IODEF v2. RFC 8329 I2NSF framework Framework for Interface to Network Security Functions A standard architecture for configuring network security functions through a unified interface RFC 8358 I-D signatures update Update to Digital Signatures on Internet-Draft Documents How signatures on Internet-Drafts handle non-ASCII text, new file formats and new content types. RFC 8452 AES-GCM-SIV AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption Authenticated encryption that stays safe even if a nonce is accidentally repeated. RFC 8492 TLS-PWD Secure Password Ciphersuites for Transport Layer Security (TLS) Secure TLS authentication using only a password, without certificates. RFC 8576 IoT Security Overview Internet of Things (IoT) Security: State of the Art and Challenges A survey of the threats facing Internet of Things devices, the protocols and guidelines that exist, and the security problems that remain open. RFC 8823 ACME for S/MIME Extensions to Automatic Certificate Management Environment for End-User S/MIME Certificates Automated certificate issuance for email signing and encryption. RFC 8937 Randomness Wrapper Randomness Improvements for Security Protocols Mixing a long-term private key into the random number generator so its output stays unpredictable even if the generator is broken. RFC 9099 IPv6 Ops Security Operational Security Considerations for IPv6 Networks A practical checklist of what changes, and what stays the same, when you secure a managed IPv6 network. RFC 9116 security.txt A File Format to Aid in Security Vulnerability Disclosure A plain text file at a known address that tells researchers how to report a security hole. RFC 9151 CNSA TLS Profile Commercial National Security Algorithm (CNSA) Suite Profile for TLS and DTLS 1.2 and 1.3 NSA's recipe for secure TLS and DTLS configuration using approved algorithms. RFC 9215 GOST in X.509 Using GOST R 34.10-2012 and GOST R 34.11-2012 Algorithms with the Internet X.509 Public Key Infrastructure Using Russian cryptographic algorithms in digital certificates. RFC 9227 Using GOST Ciphers in the Encapsulating Security Payload (ESP) and Internet Key Exchange Version 2 (IKEv2) Protocols Four IPsec encryption transforms built on the Russian GOST ciphers Magma and Kuznyechik, with a tree of keys that limits how much each key is used. RFC 9337 GOST Password Keys Generating Password-Based Keys Using the GOST Algorithms How to derive encryption keys from passwords using Russia's national cryptographic algorithms. RFC 9382 SPAKE2 SPAKE2, a Password-Authenticated Key Exchange Password-based key exchange without revealing the password. RFC 9474 RSA blind signatures RSA Blind Signatures Cryptographic signatures that hide the message from the signer. RFC 9505 Censorship techniques A Survey of Worldwide Censorship Techniques A technical survey of how regimes block or impair Internet access RFC 9529 EDHOC traces Traces of Ephemeral Diffie-Hellman Over COSE (EDHOC) Annotated examples of the EDHOC handshake showing every step and intermediate value. RFC 9558 GOST DNSSEC Use of GOST 2012 Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC Securing the Domain Name System with Russian cryptographic standards RFC 9672 OWE Transfer to IEEE Transferring Opportunistic Wireless Encryption to the IEEE 802.11 Working Group Transfers future OWE maintenance and development to the IEEE 802.11 Working Group. RFC 9683 TPM Remote Attestation Remote Integrity Verification of Network Devices Containing Trusted Platform Modules How a network operator can check from afar that a router or switch booted the software it was supposed to, using its TPM. RFC 9783 PSA attestation token Arm's Platform Security Architecture (PSA) Attestation Token The exact claims and encoding that an Arm PSA device uses to prove its identity and software state to a remote verifier. RFC 9787 E2E email guidance Guidance on End-to-End Email Security Best practices for implementing secure email with encryption and digital signatures. RFC 9813 RADIUS TLS-PSK Operational Considerations for Using TLS Pre-Shared Keys (TLS-PSKs) with RADIUS Practical rules for replacing RADIUS shared secrets with TLS pre-shared keys without redoing the whole trust model. RFC 9958 PQC for engineers Post-Quantum Cryptography for Engineers What a quantum computer would break, which replacement algorithms exist, and why moving to them is more than swapping a library. RFC 10017 OAuth for browser apps OAuth 2.0 for Browser-Based Applications Which architecture to choose, and which tokens to trust the browser with, when a JavaScript app uses OAuth 2.0. RFC 10027 Cross-device flows Best Current Practice for Security of Cross-Device Flows How attackers trick people into approving logins on a phone for the attacker's TV or laptop, and how to defend against it. RFC 3369 CMS Cryptographic Message Syntax (CMS) A general envelope format for signing, encrypting, digesting and authenticating any message content. RFC 2898 PKCS #5 PKCS #5: Password-Based Cryptography Specification Version 2.0 How to turn a human-chosen password into a cryptographic key, and use it for encryption and message authentication. RFC 2274 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) How SNMPv3 signs and optionally encrypts management messages using users, shared secrets and a 150-second timeliness window. RFC 2275 SNMP VACM View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP) How an SNMP device decides who may read, write or receive which parts of its management data. RFC 5019 Lightweight OCSP The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments A trimmed-down way to run OCSP so that millions of certificate checks can be cached and answered cheaply. RFC 1510 Kerberos V5 The Kerberos Network Authentication Service (V5) How a trusted server proves users are who they say they are without sending passwords over the network. RFC 3281 An Internet Attribute Certificate Profile for Authorization A certificate for saying what someone is allowed to do RFC 2078 GSS-API v2 Generic Security Service Application Program Interface, Version 2 A generic programming interface that lets applications get authentication and message protection without caring which security technology sits underneath. RFC 7613 Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords How to clean up, normalize and compare Unicode usernames and passwords so that look-alike characters do not cause false matches. RFC 1509 GSS-API C bindings Generic Security Service API : C-bindings How to use GSS-API security services from C programs. RFC 2407 IPsec DOI The Internet IP Security Domain of Interpretation for ISAKMP Defines how ISAKMP negotiates IP security parameters and encryption algorithms. RFC 3547 GDOI The Group Domain of Interpretation Manage encryption keys for secure group communications and multicast applications. RFC 6402 CMC updates Certificate Management over CMS (CMC) Updates Enhanced controls and attributes for certificate management RFC 9480 CMP updates Certificate Management Protocol (CMP) Updates Modernizing certificate management protocol with better encryption and flexibility. RFC 2411 IPsec Roadmap IP Security Document Roadmap A guide to organizing new encryption and authentication algorithm documents for IPsec. RFC 6407 GDOI The Group Domain of Interpretation Protocol for a group controller to distribute keys to members of a secure group. RFC 8447 IANA Registry Updates for TLS and DTLS A housekeeping pass over the TLS and DTLS IANA registries: looser rules for new entries, a Recommended column and clearer warnings. RFC 1411 Telnet Kerberos Telnet Authentication: Kerberos Version 4 Defines how Telnet's authentication option can use Kerberos Version 4. RFC 1412 Telnet SPX Telnet Authentication: SPX A Telnet authentication exchange using SPX tokens. RFC 1507 DASS DASS - Distributed Authentication Security Service A protocol for proving who you are across a network, using public keys instead of passwords. RFC 1508 GSS-API Generic Security Service Application Program Interface A mechanism-independent interface for security services. RFC 1851 ESP Triple DES The ESP Triple DES Transform How IPsec's ESP encrypts packets by running the DES cipher three times in a row with three keys. RFC 2510 CMP Internet X.509 Public Key Infrastructure Certificate Management Protocols How certificate authorities, registration authorities and end entities request, issue, update and revoke X.509 certificates. RFC 2659 S-HTML Security Extensions For HTML HTML attributes can carry S-HTTP negotiation details for a link. RFC 2692 SPKI Requirements SPKI Requirements What the SPKI working group wanted from certificates: permissions first, names second, and as simple as possible. RFC 2773 Encryption using KEA and SKIPJACK How to secure FTP file transfers using KEA authentication and SKIPJACK encryption. RFC 2841 IP-MAC IP Authentication using Keyed SHA1 with Interleaved Padding (IP-MAC) A historic recipe for authenticating IP packets by hashing them with a secret key on both sides, using SHA1. RFC 3029 DVCS Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols A trusted third party that certifies data, timestamps documents, and validates signatures for non-repudiation and archival. RFC 4478 IKEv2 re-auth Repeated Authentication in Internet Key Exchange (IKEv2) Protocol A responder can set a deadline for repeating mutual authentication. RFC 4739 IKEv2 multiple auth Multiple Authentication Exchanges in the Internet Key Exchange (IKEv2) Protocol Performing two or more authentication exchanges in sequence during key establishment. RFC 5106 EAP-IKEv2 The Extensible Authentication Protocol-Internet Key Exchange Protocol version 2 (EAP-IKEv2) Method Mutual authentication and session key setup using the VPN handshake protocol. RFC 5327 LTP Security Licklider Transmission Protocol - Security Extensions Authentication and integrity for Licklider Transmission Protocol used in deep-space communication. RFC 5636 Traceable anonymous cert Traceable Anonymous Certificate X.509 certificates with pseudonyms that can be traced to the real user if needed. RFC 5739 IPv6 Configuration in Internet Key Exchange Protocol Version 2 (IKEv2) Assigning IPv6 prefixes to VPN clients via IKEv2. RFC 5776 TESLA for ALC/NORM Use of Timed Efficient Stream Loss-Tolerant Authentication (TESLA) in the Asynchronous Layered Coding (ALC) and NACK-Oriented Reliable Multicast (NORM) Protocols How receivers of a multicast file transfer can be sure the packets came from the sender and were not altered. RFC 5873 PANA Pre-Authentication Pre-Authentication Support for the Protocol for Carrying Authentication for Network Access (PANA) Authenticate with a future network before switching to it. RFC 5924 SIP EKU Extended Key Usage (EKU) for Session Initiation Protocol (SIP) X.509 Certificates A certificate extension that restricts a domain name to use only for SIP. RFC 6210 CMS hash parameters Experiment: Hash Functions with Parameters in the Cryptographic Message Syntax (CMS) and S/MIME An experiment testing parameterized hash functions in email security. RFC 7592 OAuth 2.0 Dynamic Client Registration Management Protocol Methods to manage OAuth 2.0 client registrations throughout their lifetime. RFC 9985 Optimized BFD auth Optimizing Bidirectional Forwarding Detection (BFD) Authentication Spend heavy authentication only on the BFD packets that change something, and use a lighter check for the steady stream of Up packets. RFC 10015 Deprecate TLS 1.2 kex Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2 TLS 1.2 and DTLS 1.2 must stop using RSA key exchange and finite-field Diffie-Hellman, and should avoid static ECDH. RFC 2408 ISAKMP Internet Security Association and Key Management Protocol (ISAKMP) Framework for negotiating security agreements and exchanging cryptographic keys. RFC 3709 X.509 Logotypes Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates How a certificate can carry a pointer to a logo or sound so people can recognize who it belongs to. RFC 4634 US SHA and HMAC-SHA US Secure Hash Algorithms (SHA and HMAC-SHA) Reference implementations of the US SHA hash functions in C code. RFC 2139 RADIUS Accounting RADIUS Accounting Tracking network access server usage with a central accounting server. RFC 4835 Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH) Specify which encryption and authentication algorithms every IPsec product must support to ensure interoperability. RFC 1334 PAP/CHAP PPP Authentication Protocols Two methods to verify that the other end of a PPP link is who it claims to be. RFC 3268 AES for TLS Advanced Encryption Standard (AES) Ciphersuites for Transport Layer Security (TLS) Stronger encryption options for secure internet connections RFC 5296 ERP EAP Extensions for EAP Re-authentication Protocol (ERP) Fast re-authentication for moving devices without repeating the full login. RFC 7627 TLS Extended Master Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension Binding the TLS master secret to the full handshake to prevent secret synchronization attacks. RFC 4305 IPsec algorithm reqs Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH) Which encryption and authentication algorithms every IPsec ESP and AH implementation must, should or may support. RFC 1320 MD4 The MD4 Message-Digest Algorithm A fast message-digest algorithm that computes a 128-bit fingerprint for digital signatures and data integrity. RFC 2313 PKCS #1 v1.5 PKCS #1: RSA Encryption Version 1.5 RSA public-key encryption and signatures, version 1.5 RFC 7507 TLS_FALLBACK_SCSV TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks Preventing protocol downgrade attacks when clients retry with older TLS versions. RFC 3575 RADIUS IANA IANA Considerations for RADIUS (Remote Authentication Dial In User Service) How to assign new numbers in RADIUS authentication and accounting. RFC 2828 Security glossary Internet Security Glossary A comprehensive reference for consistent Internet security terminology RFC 3576 RADIUS Dynamic Auth Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS) Server-initiated commands to disconnect users and update their permissions mid-session. RFC 4051 XML Security URIs Additional XML Security Uniform Resource Identifiers (URIs) Names for cryptographic algorithms and key types in XML signatures and encryption. RFC 4307 IKEv2 algorithms Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2) The encryption and hashing methods all IKEv2 implementations must support. RFC 8782 DOTS signal channel Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification A protocol for requesting DDoS mitigation protection over the network. RFC 6931 Additional XML Security Uniform Resource Identifiers (URIs) The official registry of algorithm identifiers for XML security. RFC 2437 PKCS#1 v2.0 PKCS #1: RSA Cryptography Specifications Version 2.0 How to use the RSA algorithm properly for encrypting keys and signing messages, including the new OAEP padding. RFC 1244 Site Security Handbook Site Security Handbook How to create security policies and procedures for networked computer sites. RFC 2267 Ingress Filtering Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing Make provider edge routers drop packets whose source address could not have come from the network they entered through. RFC 5208 PKCS #8 Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification Version 1.2 Standard format for storing and protecting cryptographic private keys. RFC 2716 EAP-TLS (PPP) PPP EAP TLS Authentication Protocol Mutual authentication and key derivation for PPP dial-up connections using TLS certificates RFC 972 PWDGEN Password Generator Protocol A network service that offers pronounceable passwords for users to choose from. RFC 1352 SNMP Security SNMP Security Protocols Authentication and encryption protocols for secure network management. RFC 1472 PPP security MIB The Definitions of Managed Objects for the Security Protocols of the Point-to-Point Protocol SNMP objects for configuring PPP authentication, including the stored identities and secrets, and why they must be locked down. RFC 1961 SOCKS5 GSS-API GSS-API Authentication Method for SOCKS Version 5 How a SOCKS version 5 client and server prove who they are and protect traffic using GSS-API. RFC 2420 PPP 3DES The PPP Triple-DES Encryption Protocol (3DESE) How to encrypt PPP packets with Triple-DES in CBC mode, negotiated through the PPP Encryption Control Protocol. RFC 2485 DHCP Option for The Open Group's User Authentication Protocol A DHCP option that provides URLs for User Authentication Protocol servers. RFC 2857 HMAC-RIPEMD-160-96 The Use of HMAC-RIPEMD-160-96 within ESP and AH How to use HMAC with the RIPEMD-160 hash to authenticate IPsec packets, with a 96-bit tag and a 160-bit key. RFC 2942 Telnet Kerberos 5 Telnet Authentication: Kerberos Version 5 How a Telnet client and server prove who they are to each other using Kerberos Version 5 tickets. RFC 2943 Telnet DSA TELNET Authentication Using DSA How a Telnet client proves who it is, and optionally checks the server, using DSA digital signatures and certificates. RFC 2944 Telnet SRP Telnet Authentication: SRP How Telnet uses the Secure Remote Password protocol so a user can log in without sending a password. RFC 2949 Telnet CAST-128 OFB Telnet Encryption: CAST-128 64 bit Output Feedback How Telnet uses CAST-128 in 64-bit output feedback mode. RFC 2950 Telnet CAST-128 CFB Telnet Encryption: CAST-128 64 bit Cipher Feedback How Telnet uses CAST-128 in 64-bit cipher feedback mode. RFC 2984 CAST-128 in CMS Use of the CAST-128 Encryption Algorithm in CMS How to plug the CAST-128 cipher into S/MIME's Cryptographic Message Syntax for content and key encryption. RFC 3185 CMS Key Reuse Reuse of CMS Content Encryption Keys A small trick for reusing one message's encryption key to protect the next message, without another expensive key exchange. RFC 3456 DHCP for IPsec tunnels Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode How a remote host gets a corporate address through an IPsec tunnel by reusing ordinary DHCPv4. RFC 3594 PacketCable Security Ticket Control Sub-Option for the DHCP CableLabs Client Configuration (CCC) Option A DHCP sub-option that lets a cable provider tell a device to throw away its saved security tickets. RFC 4196 SEED in IPsec The SEED Cipher Algorithm and Its Use with IPsec How to encrypt IPsec ESP traffic with the SEED block cipher in CBC mode with a fresh random IV in every packet. RFC 4304 IPsec ESN DOI Extended Sequence Number (ESN) Addendum to IPsec Domain of Interpretation (DOI) for Internet Security Association and Key Management Protocol (ISAKMP) How IPsec peers negotiate whether to use 64-bit extended sequence numbers. RFC 4335 SSH Break The Secure Shell (SSH) Session Channel Break Extension How an SSH client asks the remote side to send a serial BREAK signal, as Telnet consoles already could. RFC 4372 Chargeable-User-Identity Chargeable User Identity A RADIUS attribute that gives roaming partners a temporary billing handle without revealing who the user is. RFC 4476 AC policies ext Attribute Certificate (AC) Policies Extension A certificate extension that says which policies an attribute certificate was issued under. RFC 4494 AES-CMAC-96 for IPsec The AES-CMAC-96 Algorithm and Its Use with IPsec How to use the AES block cipher to stamp IPsec packets with a 96-bit authentication tag. RFC 4537 Kerberos etype negotiate Kerberos Cryptosystem Negotiation Extension Lets a Kerberos client and server agree on a stronger encryption type than the KDC picked for the ticket. RFC 4557 OCSP for PKINIT Online Certificate Status Protocol (OCSP) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Lets Kerberos clients and servers carry fresh certificate status answers inside PKINIT login messages. RFC 4675 RADIUS VLAN attributes RADIUS Attributes for Virtual LAN and Priority Support Four new RADIUS attributes that let an authentication server hand out VLAN memberships and priority mappings per port. RFC 4683 X.509 SIM Internet X.509 Public Key Infrastructure Subject Identification Method (SIM) A way to put a hashed, password-protected personal identifier in a certificate so only the owner can reveal it. RFC 4807 IPsec SPD MIB IPsec Security Policy Database Configuration MIB A standard SNMP table set for writing the rulebook that tells an IPsec device which packets to accept, drop or protect. RFC 4945 The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX Pins down how IKE and IPsec should use X.509 certificates, so that implementations make the same choices and interoperate. RFC 5275 CMS Key Management CMS Symmetric Key Management and Distribution How a group of people can share one symmetric key, and how that key is handed out and replaced when membership changes. RFC 5324 FC-SP MIB MIB for Fibre-Channel Security Protocols (FC-SP) Five SNMP MIB modules that let a network manager monitor and configure the security features of Fibre Channel storage networks. RFC 5588 GSS-API store cred Generic Security Service Application Program Interface (GSS-API) Extension for Storing Delegated Credentials A GSS-API function that saves delegated credentials into the normal credential store so ordinary calls can use them. RFC 5660 IPsec latching IPsec Channels: Connection Latching Tying a connection to the exact IPsec peer and protection it started with, and alerting the application if that changes. RFC 5752 CMS Multi-Signature Multiple Signatures in Cryptographic Message Syntax (CMS) A signed attribute that lets a verifier notice when someone strips the stronger of a signer's several CMS signatures. RFC 5807 PANA Master Key Definition of Master Key between PANA Client and Enforcement Point How a PANA client and a network gatekeeper get a shared key, derived from the EAP session key, that no other gatekeeper shares. RFC 5913 Clearance Attribute and Authority Clearance Constraints Certificate Extension How X.509 certificates carry security clearances and how authorities can cap the clearances they vouch for. RFC 5940 Additional Cryptographic Message Syntax (CMS) Revocation Information Choices Lets a CMS message carry OCSP and SCVP answers about revoked certificates, not just CRLs. RFC 6065 Using Authentication, Authorization, and Accounting Services to Dynamically Provision View-Based Access Control Model User-to-Group Mappings Lets a central login server decide which SNMP access group each user belongs to, so devices need no manual updates. RFC 6239 Suite B for SSH Suite B Cryptographic Suites for Secure Shell (SSH) Using US government cryptography standards with the Secure Shell protocol. RFC 6339 Context Token Encapsulate/Decapsulate and OID Comparison Functions for the Generic Security Service Application Program Interface (GSS-API) Three small GSS-API functions for adding and removing the standard token header and for comparing OIDs. RFC 6403 Suite B CMC Suite B Profile of Certificate Management over CMS How to manage certificates using Suite B cryptography. RFC 6448 Unencrypted KRB-CRED The Unencrypted Form of Kerberos 5 KRB-CRED Message A defined way to transfer Kerberos credentials without message-level encryption over a protected transport. RFC 6476 CMS MAC encryption Using Message Authentication Code (MAC) Encryption in the Cryptographic Message Syntax (CMS) How to encrypt a CMS message and protect it with a MAC, using two keys derived from one master secret. RFC 6595 SAML SASL Mechanism A Simple Authentication and Security Layer (SASL) and GSS-API Mechanism for the Security Assertion Markup Language (SAML) How mail, chat and other non-web apps can log users in through a SAML identity provider, using SASL. RFC 6616 OpenID for SASL/GSS-API A Simple Authentication and Security Layer (SASL) and Generic Security Service Application Program Interface (GSS-API) Mechanism for OpenID How a mail client can log in with an OpenID by handing the web part of the login to a browser. RFC 6630 ERP/AAK EAP Re-authentication Protocol Extensions for Authenticated Anticipatory Keying (ERP/AAK) How a device can get Wi-Fi or mobile keys prepared at the next access point before it arrives there. RFC 6668 SHA-2 for SSH SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol SHA-2 based message authentication algorithms for SSH data integrity checks. RFC 6738 Diameter IKEv2 SK Diameter IKEv2 SK: Using Shared Keys to Support Interaction between IKEv2 Servers and Diameter Servers How an IKEv2 server asks a Diameter server for the shared key it needs to authenticate a peer. RFC 6784 Kerberos DHCPv6 options Kerberos Options for DHCPv6 Four DHCPv6 options that tell a client which Kerberos realm and key servers to use. RFC 6786 Encrypting PANA AVPs Encrypting the Protocol for Carrying Authentication for Network Access (PANA) Attribute-Value Pairs How PANA lets selected attribute-value pairs travel encrypted instead of in the clear. RFC 6806 Kerberos referrals Kerberos Principal Name Canonicalization and Cross-Realm Referrals How a Kerberos KDC can point clients to the right realm, so clients need far less realm configuration. RFC 6818 Updates to the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Small but important fixes to the X.509 certificate profile: text encodings, internationalized names and trust anchors. RFC 6880 An Information Model for Kerberos Version 5 A neutral list of what a Kerberos ticket server stores, so that it can be administered the same way everywhere. RFC 6942 Diameter ERP Diameter Support for the EAP Re-authentication Protocol (ERP) How Diameter carries fast EAP re-authentication between an access network and a re-authentication server. RFC 7056 Name Attributes for the GSS-API Extensible Authentication Protocol (EAP) Mechanism How applications read RADIUS and SAML attributes about an authenticated user through GSS-API name attributes. RFC 7192 Algorithms for Cryptographic Message Syntax (CMS) Key Package Receipt and Error Content Types Which signature, key-transport and encryption algorithms to support when protecting CMS key package receipts and errors. RFC 7685 TLS Padding A Transport Layer Security (TLS) ClientHello Padding Extension A TLS extension that pads ClientHello messages to avoid size-related implementation bugs. RFC 7773 Authentication Context Certificate Extension A certificate extension that records how the issuer authenticated the subject, with a SAML-based format. RFC 7791 IKEv2 SA Cloning Cloning the IKE Security Association in the Internet Key Exchange Protocol Version 2 (IKEv2) Spawn extra IKEv2 tunnels from one authenticated session, with no second login. RFC 7797 JWS Unencoded Payload JSON Web Signature (JWS) Unencoded Payload Option A header switch that lets a JWS sign the raw payload instead of its base64url-encoded form. RFC 7894 Alternative Challenge Password Attributes for Enrollment over Secure Transport Gives one-time passwords, revocation passwords and EST identity linking their own certificate request attributes. RFC 8031 Curve25519 and Curve448 for the Internet Key Exchange Protocol Version 2 (IKEv2) Key Agreement Two modern elliptic curves, Curve25519 and Curve448, become key exchange groups for IKEv2 VPN negotiation. RFC 8045 RADIUS Extensions for IP Port Configuration and Reporting Three RADIUS attributes that let a server limit, report and pre-set the transport ports a shared-address device gives each user. RFC 8103 ChaCha20-Poly1305 in CMS Using ChaCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Syntax (CMS) How to use the ChaCha20-Poly1305 authenticated cipher inside CMS authenticated-enveloped data. RFC 8129 Kerberos Auth Indicator Authentication Indicator in Kerberos Tickets A Kerberos ticket field that tells services how strongly the client was authenticated. RFC 8176 AMR Values Authentication Method Reference Values A shared vocabulary and registry for saying how a user proved who they are inside a JSON Web Token. RFC 8263 GDOI GROUPKEY-PUSH Ack Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message How a group member tells a GDOI key server that it received and applied a rekey message. RFC 8322 ROLIE Resource-Oriented Lightweight Information Exchange (ROLIE) A web-style way to publish, find and share security automation data, built on the Atom feed formats. RFC 8412 SWIMA Software Inventory Message and Attributes (SWIMA) for PA-TNC How an endpoint tells a network server which software is installed, and keeps that list up to date as it changes. RFC 8418 X25519 CMS Use of the Elliptic Curve Diffie-Hellman Key Agreement Algorithm with X25519 and X448 in the Cryptographic Message Syntax (CMS) How secure messages can use the fast X25519 and X448 curves to agree on a key for each recipient. RFC 8420 EdDSA in IKEv2 Using the Edwards-Curve Digital Signature Algorithm (EdDSA) in the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 signals support for EdDSA signatures that do not need a separate hash. RFC 8442 ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites for TLS 1.2 and DTLS 1.2 Four TLS 1.2 and DTLS 1.2 cipher suites that pair a pre-shared key with ephemeral elliptic-curve key exchange and AEAD encryption. RFC 8485 Vectors of Trust Vectors of Trust A compact way for an identity provider to tell a relying party how a login was proofed, authenticated and delivered. RFC 8600 XMPP for Security Info Using Extensible Messaging and Presence Protocol (XMPP) for Security Information Exchange Using XMPP publish-subscribe as a broker for sharing security incident reports among security systems and response teams. RFC 8696 PSK in CMS Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS) Mixing a pre-shared key into CMS key management so that stored messages stay safe from a future quantum computer. RFC 8812 COSE for WebAuthn CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms Registers the RSA and secp256k1 signature algorithms that WebAuthn and FIDO2 need in the COSE and JOSE registries. RFC 8817 TSVCIS RTP payload RTP Payload Format for Tactical Secure Voice Cryptographic Interoperability Specification (TSVCIS) Codec How to put TSVCIS tactical voice frames, built on the MELPe vocoder, into RTP packets. RFC 8898 SIP bearer tokens Third-Party Token-Based Authentication and Authorization for Session Initiation Protocol (SIP) How a SIP phone can prove who it is with an OAuth access token from a third party instead of a password. RFC 8983 IKEv2 IPv4/IPv6 Internet Key Exchange Protocol Version 2 (IKEv2) Notification Status Types for IPv4/IPv6 Coexistence New IKEv2 notifications let a VPN responder tell the initiator which of IPv4 and IPv6 it will hand out. RFC 9066 DOTS Call Home Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Call Home How a network that hosts attack sources can call its provider back, so outbound DDoS traffic is blocked near where it starts. RFC 9133 DOTS Filtering Control Controlling Filtering Rules Using Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Lets a DDoS victim switch prepared filtering rules on or off through the DOTS signal channel mid-attack. RFC 9149 TLS Ticket Requests TLS Ticket Requests A TLS extension that lets a client tell the server how many session tickets it wants. RFC 9261 Exported Authenticators Exported Authenticators in TLS Prove you own a certificate on an existing TLS connection, at any time after the handshake, without changing TLS itself. RFC 9310 X.509 5G NF Types X.509 Certificate Extension for 5G Network Function Types A certificate extension that lists which 5G network function types a certificate holder serves. RFC 9335 Cryptex Completely Encrypting RTP Header Extensions and Contributing Sources Cryptex encrypts RTP header extensions and contributing sources that SRTP leaves in the clear. RFC 9362 DOTS Robust Block Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Configuration Attributes for Robust Block Transmission Lets DOTS peers negotiate the tuning knobs for sending big messages quickly while a DDoS attack drops packets. RFC 9431 ACE MQTT TLS Profile Message Queuing Telemetry Transport (MQTT) and Transport Layer Security (TLS) Profile of Authentication and Authorization for Constrained Environments (ACE) Framework How an MQTT broker can check, with ACE access tokens, who may publish and subscribe to which topics. RFC 9444 ACME for subdomains Automated Certificate Management Environment (ACME) for Subdomains How an ACME client can prove control of a parent domain and get certificates for subdomains under it. RFC 9464 IKEv2 encrypted DNS Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS How a VPN server tells a connecting client which encrypted DNS resolvers to use, and how to trust them. RFC 9470 OAuth step-up auth OAuth 2.0 Step Up Authentication Challenge Protocol How an API can tell a client 'that login is not strong or fresh enough', and how the client asks for a better one. RFC 9478 Labeled IPsec IKEv2 Labeled IPsec Traffic Selector Support for the Internet Key Exchange Protocol Version 2 (IKEv2) A new IKEv2 Traffic Selector type that lets two IPsec peers agree on a Mandatory Access Control security label for a tunnel. RFC 9495 CAA for email Certification Authority Authorization (CAA) Processing for Email Addresses A DNS record tag that lets a domain say which certificate authorities may issue email certificates for it. RFC 9538 CDNI ACME delegation Content Delivery Network Interconnection (CDNI) Delegation Using the Automated Certificate Management Environment How one CDN tells another it may get HTTPS certificates for a customer's domain without ever handing over private keys. RFC 9540 Oblivious SVCB Discovery of Oblivious Services via Service Binding Records A DNS parameter that tells clients a service can be reached with Oblivious HTTP, and where to find its keys. RFC 9588 Kerberos SPAKE Kerberos Simple Password-Authenticated Key Exchange (SPAKE) Pre-authentication A Kerberos login step that stops attackers from guessing your password offline, and can carry a second factor safely. RFC 9593 IKEv2 auth methods Announcing Supported Authentication Methods in the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 peers tell each other which authentication methods they support, before they pick one. RFC 9594 ACE group keying Key Provisioning for Group Communication Using Authentication and Authorization for Constrained Environments (ACE) How small devices get approved for a secure group and receive the group's keys from a Key Distribution Center. RFC 9605 SFrame Secure Frame (SFrame): Lightweight Authenticated Encryption for Real-Time Media End-to-end encryption for group video calls, built so a middle server can still forward media without seeing it. RFC 9608 No revocation X.509 No Revocation Available for X.509 Public Key Certificates A certificate extension that tells relying parties the CA publishes no revocation information, so they can skip revocation checks. RFC 9611 IKEv2 per-resource SAs Internet Key Exchange Protocol Version 2 (IKEv2) Support for Per-Resource Child Security Associations (SAs) How two IPsec peers can set up several identical tunnels, one per CPU or queue, to get past the single-core speed limit. RFC 9618 X.509 policy validation Updates to X.509 Policy Validation A fix for X.509 policy validation that stops a small certificate chain from blowing up a validator's memory and time. RFC 9668 EDHOC with CoAP Using Ephemeral Diffie-Hellman Over COSE (EDHOC) with the Constrained Application Protocol (CoAP) and Object Security for Constrained RESTful Environments (OSCORE) How two tiny devices set up OSCORE keys with EDHOC over CoAP, and how to squeeze that into two round trips. RFC 9688 SHA3 in CMS Use of the SHA3 One-Way Hash Functions in the Cryptographic Message Syntax (CMS) How to name and use the four SHA3 hash functions for signatures, MACs and key derivation in CMS messages. RFC 9701 JWT Token Introspection JSON Web Token (JWT) Response for OAuth Token Introspection How an OAuth authorization server can answer token introspection with a signed, optionally encrypted JWT. RFC 9709 CMS HKDF-SHA256 Encryption Key Derivation in the Cryptographic Message Syntax (CMS) Using HKDF with SHA-256 Mixing the algorithm identifier into the CMS encryption key so an attacker cannot swap the cipher and read the message. RFC 9728 OAuth PR Metadata OAuth 2.0 Protected Resource Metadata A standard JSON document that tells OAuth clients how a protected API works and which authorization server to use. RFC 9734 EKU for IM URIs X.509 Certificate Extended Key Usage (EKU) for Instant Messaging URIs A certificate purpose identifier for credentials that prove an instant messaging client's identity. RFC 9761 MUD TLS profiles Manufacturer Usage Description (MUD) for TLS and DTLS Profiles for Internet of Things (IoT) Devices Lets IoT makers publish the TLS and DTLS behavior their devices should show, so networks can spot impostors. RFC 9763 Related certificates Related Certificates for Use in Multiple Authentications within a Protocol A certificate request attribute and an X.509 extension that prove two certificates belong to the same entity. RFC 9767 GNAP RS connections Grant Negotiation and Authorization Protocol Resource Server Connections How a GNAP authorization server and the resource servers it protects can talk to each other about access tokens. RFC 9770 ACE token revocation Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework How an ACE authorization server tells constrained devices that an access token was revoked before it expired. RFC 9773 ACME renewal information ACME Renewal Information (ARI) Extension Lets a certificate authority tell ACME clients when to renew, smoothing load and speeding up emergency replacements. RFC 9782 EAT media types Entity Attestation Token (EAT) Media Types Six registered media types that label Entity Attestation Tokens when they travel over HTTP, CoAP and similar protocols. RFC 9799 ACME for .onion Automated Certificate Management Environment (ACME) Extensions for ".onion" Special-Use Domain Names How ACME can issue TLS certificates to Tor .onion services, which are not in the DNS. RFC 9809 EKU for updates X.509 Certificate Extended Key Usage (EKU) for Configuration, Updates, and Safety-Critical Communication Four new certificate labels that say a key may sign configs, trust anchors, updates, or secure safety-critical links. RFC 9820 CoAP-EAP Authentication Service Based on the Extensible Authentication Protocol (EAP) for Use with the Constrained Application Protocol (CoAP) Carrying EAP authentication over CoAP so constrained IoT devices can join a domain and get OSCORE keys. RFC 9882 ML-DSA in CMS Use of the ML-DSA Signature Algorithm in the Cryptographic Message Syntax (CMS) How to sign CMS messages with ML-DSA, a signature scheme designed to resist quantum computers. RFC 9883 Key possession attr An Attribute for Statement of Possession of a Private Key A signed statement that lets a certificate requester claim it holds a private key, instead of proving it. RFC 2264 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) Authenticating and encrypting SNMPv3 messages with user identities, keys, and replay protection. RFC 3075 XML-Signature XML-Signature Syntax and Processing Syntax and processing rules for digital signatures over XML and other data, wherever the data lives. RFC 8398 Intl email in X.509 Internationalized Email Addresses in X.509 Certificates Support for email addresses with non-ASCII characters in digital certificates. RFC 7539 ChaCha20-Poly1305 ChaCha20 and Poly1305 for IETF Protocols A modern stream cipher and authenticator for IETF protocols. RFC 4843 ORCHID An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers (ORCHID) IPv6-like identifiers derived from cryptographic hashes for endpoint identification. RFC 7321 Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH) Choose strong encryption algorithms for IPsec protocols RFC 1319 MD2 The MD2 Message-Digest Algorithm The 1992 hash function that turns any message into a 128-bit fingerprint. RFC 6649 Deprecate DES, RC4-HMAC-EXP, and Other Weak Cryptographic Algorithms in Kerberos Retire weak encryption in Kerberos before it becomes a liability. RFC 1991 PGP Message Format PGP Message Exchange Formats The packet-based structure for encrypted and signed messages RFC 3126 Electronic Signature Formats for long term electronic signatures A format for digital signatures that remain valid and provable over many years, protecting against repudiation. RFC 5469 TLS DES/IDEA DES and IDEA Cipher Suites for Transport Layer Security (TLS) Why TLS cipher suites using single DES and IDEA are no longer recommended. RFC 3682 GTSM The Generalized TTL Security Mechanism (GTSM) Using the packet hop count to prevent attacks on routing protocols from distant sources. RFC 6962 Certificate Transparency Certificate Transparency Public audit logs for TLS certificates to detect misissued certificates. RFC 1938 One-Time Password System A One-Time Password System Use a different password for each login, defeating eavesdroppers who capture network traffic. RFC 2058 RADIUS Remote Authentication Dial In User Service (RADIUS) Central authentication server for dial-in networks and access control. RFC 2478 SPNEGO The Simple and Protected GSS-API Negotiation Mechanism Letting two programs find a security method they both understand, without prior agreement. RFC 2587 PKIX LDAPv2 Schema Internet X.509 Public Key Infrastructure LDAPv2 Schema How to organize and store X.509 digital certificates in an LDAP directory. RFC 2797 CMC Certificate Management Messages over CMS A protocol for requesting and managing public key certificates using standard cryptographic messages. RFC 2853 GSS-API Java Generic Security Service API Version 2 : Java Bindings How Java programs use cryptographic security services RFC 3546 TLS Extensions Transport Layer Security (TLS) Extensions Extensible mechanisms for TLS handshake messages and six specific extensions for constrained clients. RFC 6277 OCSP algorithm agility Online Certificate Status Protocol Algorithm Agility Letting OCSP clients and servers agree on signature algorithms for certificate status responses. RFC 1445 SNMPv2 admin model Administrative Model for version 2 of the Simple Network Management Protocol (SNMPv2) Security and access control framework for SNMPv2 network management. RFC 9847 TLS/DTLS IANA registries IANA Registry Updates for TLS and DTLS Adding a way to mark discouraged cryptographic options in TLS registry tables. RFC 5653 GSS-API Java bindings Generic Security Service API Version 2: Java Bindings Update Java language bindings for GSS-API security services RFC 2314 PKCS #10 v1.5 PKCS #10: Certification Request Syntax Version 1.5 The format for requesting a digital certificate from a certificate authority. RFC 4009 SEED The SEED Encryption Algorithm A 128-bit block cipher widely used for encryption in South Korea. RFC 2831 DIGEST-MD5 SASL Using Digest Authentication as a SASL Mechanism Using digest authentication (like HTTP) as a general authentication mechanism for any protocol. RFC 6112 Kerberos Anonymity Anonymity Support for Kerberos Proving your credentials without revealing who you are. RFC 2511 CRMF Internet X.509 Certificate Request Message Format Standard format for asking a certification authority to issue an X.509 certificate. RFC 2875 DH proof-of-possession Diffie-Hellman Proof-of-Possession Algorithms Proving possession of a Diffie-Hellman private key without using it for signing. RFC 3211 CMS Passwords Password-based Encryption for CMS A fourth way to wrap a message's encryption key in CMS: derive a key-encryption key from a password. RFC 3664 AES-XCBC-PRF-128 The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE) A 128-bit AES-based pseudo-random function for IKE key generation. RFC 4507 TLS session tickets Transport Layer Security (TLS) Session Resumption without Server-Side State Lets servers avoid keeping TLS session state with client-held tickets. RFC 4590 RADIUS Digest RADIUS Extension for Digest Authentication Let a RADIUS server verify HTTP Digest passwords for SIP and HTTP. RFC 6170 Certificate Image Internet X.509 Public Key Infrastructure -- Certificate Image Attaching visual representations to X.509 certificates. RFC 6844 DNS CAA DNS Certification Authority Authorization (CAA) Resource Record DNS records that list which certification authorities may issue certificates for a domain RFC 6961 The Transport Layer Security (TLS) Multiple Certificate Status Request Extension Bringing fresh certificate status checks into the TLS handshake. RFC 8229 IKE over TCP TCP Encapsulation of IKE and IPsec Packets Send IKE and IPsec packets through TCP when UDP is blocked by middleboxes. RFC 8399 RFC 5280 i18n Internationalization Updates to RFC 5280 Updates to X.509 certificates for internationalized domain names and email addresses. RFC 8954 OCSP Nonce Online Certificate Status Protocol (OCSP) Nonce Extension Defines secure length limits for the nonce extension to prevent replay attacks. RFC 6253 HIP certificates Host Identity Protocol Certificates Carrying and representing certificates in the Host Identity Protocol RFC 7298 Babel Hashed Message Authentication Code (HMAC) Cryptographic Authentication Adding optional cryptographic authentication to Babel routing protocol messages. RFC 3278 Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) Using short but strong elliptic curve keys to sign and encrypt messages. RFC 4753 ECP groups for IKE ECP Groups For IKE and IKEv2 Three elliptic curve groups for secure key exchange in IKE and IKEv2. RFC 5849 OAuth 1.0 The OAuth 1.0 Protocol Delegated access to protected resources without sharing passwords. RFC 9579 PBMAC1 in PKCS #12 Use of Password-Based Message Authentication Code 1 (PBMAC1) in PKCS #12 Syntax Using modern key derivation with password-based integrity protection in PKCS #12 files. RFC 9908 EST CSR attributes Clarification and Enhancement of the CSR Attributes Definition in RFC 7030 How an EST server can tell a client exactly which fields and values its certificate request must contain. RFC 5872 PANA IANA Rules IANA Rules for the Protocol for Carrying Authentication for Network Access (PANA) More than one approval path for registering selected PANA values RFC 9519 SSH IANA registry policy Update to the IANA SSH Protocol Parameters Registry Requirements SSH's IANA registries move from needing an RFC to needing a quick sign-off from designated experts. RFC 1186 MD4 MD4 Message Digest Algorithm A fast 128-bit cryptographic message digest algorithm for signing and checksums. RFC 1416 Telnet auth Telnet Authentication Option A way to prove your identity over Telnet without sending passwords in the clear RFC 1969 PPP DES Encryption The PPP DES Encryption Protocol (DESE) Encrypting point-to-point links using the DES algorithm RFC 2527 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework A checklist for writing rules about how digital certificates are issued and managed. RFC 4909 Multimedia Internet KEYing (MIKEY) General Extension Payload for Open Mobile Alliance BCAST LTKM/STKM Transport Extend MIKEY to carry broadcast TV key management parameters for mobile devices. RFC 5581 Camellia in OpenPGP The Camellia Cipher in OpenPGP The algorithm identifiers and rules for using Camellia in OpenPGP RFC 6045 RID Real-time Inter-network Defense (RID) A messaging system that lets network providers trace attacks upstream and ask each other to stop them, in near real time. RFC 6046 RID Transport of Real-time Inter-network Defense (RID) Messages How Real-time Inter-network Defense messages travel between security teams: plain HTTP POSTs over mutually authenticated TLS. RFC 2559 PKIX LDAPv2 Internet X.509 Public Key Infrastructure Operational Protocols - LDAPv2 Using the lightweight directory protocol to retrieve and manage X.509 certificates RFC 2618 RADIUS Client MIB RADIUS Authentication Client MIB Monitoring system objects for RADIUS authentication clients. RFC 2619 RADIUS Server MIB RADIUS Authentication Server MIB Monitoring system objects for RADIUS authentication servers. RFC 3039 Internet X.509 Public Key Infrastructure Qualified Certificates Profile Standard digital ID certificates for legally-significant signatures and identification. RFC 3770 Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN) Marking certificates as safe for wireless and dial-up authentication. RFC 4132 Camellia in TLS Addition of Camellia Cipher Suites to Transport Layer Security (TLS) Adding a fast block cipher option for encrypting TLS traffic. RFC 4630 DirectoryString update Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Fixing how text is encoded in digital certificates and revocation lists RFC 5990 RSA-KEM Use of the RSA-KEM Key Transport Algorithm in the Cryptographic Message Syntax (CMS) A secure one-pass method to transport encryption keys using RSA public keys. RFC 6637 ECC in OpenPGP Elliptic Curve Cryptography (ECC) in OpenPGP Smaller, faster cryptographic keys for secure emails and messages. RFC 7630 HMAC-SHA-2 for SNMPv3 HMAC-SHA-2 Authentication Protocols in the User-based Security Model (USM) for SNMPv3 Stronger hash-based authentication for network management messages using SHA-2 instead of older hashes. RFC 8708 HSS/LMS in CMS Use of the HSS/LMS Hash-Based Signature Algorithm in the Cryptographic Message Syntax (CMS) Hash-based digital signatures in cryptographic messages using HSS/LMS. RFC 931 Authentication server Authentication server A proposal to identify the user associated with a TCP connection. RFC 1852 AH with Keyed SHA IP Authentication using Keyed SHA Using SHA hashing to authenticate IP packets with a secret key. RFC 8773 TLS 1.3 cert + ext PSK TLS 1.3 Extension for Certificate-Based Authentication with an External Pre-Shared Key Combine a certificate and secret key in TLS 1.3 to protect against quantum threats RFC 4853 Cryptographic Message Syntax (CMS) Multiple Signer Clarification Clarifying how CMS recipients process several signatures from one signer. RFC 5554 GSS-API channel bindings Clarifications and Extensions to the Generic Security Service Application Program Interface (GSS-API) for the Use of Channel Bindings A general structure and requirements for GSS-API channel bindings. RFC 9395 Deprecate IKEv1 Deprecation of the Internet Key Exchange Version 1 (IKEv1) Protocol and Obsoleted Algorithms IKEv1 is retired for good, and a batch of old, unused algorithms are marked deprecated in the IKEv2 registries. RFC 1170 Public Key Licensing Public key standards and licenses A public statement on licensing patents related to public-key cryptography. RFC 1457 Security Label Framework for the Internet A framework for attaching security labels to network data RFC 1492 TACACS An Access Control Protocol, Sometimes Called TACACS A protocol for delegating authentication decisions to a central server RFC 1751 Readable 128-bit keys A Convention for Human-Readable 128-bit Keys Use six simple English words instead of a 64-bit hex string, and twelve words for a 128-bit key. RFC 1805 Location-Independent Data/Software Integrity Protocol A protocol for proving files have not been tampered with, no matter where they come from. RFC 1824 TESS The Exponential Security System TESS: An Identity-Based Cryptographic Protocol for Authenticated Key-Exchange (E.I.S.S.-Report 1995/4) An identity-based cryptographic system for authenticated key exchange using discrete exponentiation RFC 1875 UNINETT PCA Policy UNINETT PCA Policy Statements Operating rules for a Norwegian certificate authority RFC 2084 Web Transaction Security Considerations for Web Transaction Security Requirements for securing HTTP with confidentiality, integrity, and authentication. RFC 2179 Network Security For Trade Shows Practical security checklist for vendors exhibiting at network trade shows. RFC 2323 IETF Security Guidelines IETF Identification and Security Guidelines An April 1st joke about mistaken identity at IETF meetings. RFC 2479 IDUP-GSS-API Independent Data Unit Protection Generic Security Service Application Program Interface (IDUP-GSS-API) Protecting single messages or files with cryptography independent of any connection. RFC 2612 CAST-256 The CAST-256 Encryption Algorithm A 128-bit block cipher with variable key sizes from 128 to 256 bits. RFC 2628 Crypto API Simple Cryptographic Program Interface (Crypto API) A simple programming interface to cryptographic functions, separating crypto libraries from applications. RFC 2695 ONC RPC Authentication Authentication Mechanisms for ONC RPC Two secure ways to prove identity between programs over a network. RFC 2709 Security Model with Tunnel-mode IPsec for NAT Domains How network address translation and IPsec can work together to protect traffic from private networks. RFC 2807 XML-DSig requirements XML Signature Requirements Requirements for digitally signing and authenticating XML content RFC 2808 SecurID SASL The SecurID(r) SASL Mechanism Using SecurID tokens for authentication in SASL-enabled protocols RFC 2876 KEA and SKIPJACK in CMS Use of the KEA and SKIPJACK Algorithms in CMS Conventions for using two government-designed cryptographic algorithms with the Cryptographic Message Syntax. RFC 2888 L2TP with IPsec Secure Remote Access with L2TP Secure dial-in from the Internet using L2TP tunneling and IPsec encryption RFC 2951 Telnet KEA/SKIPJACK TELNET Authentication Using KEA and SKIPJACK Secure Telnet authentication and encryption using government algorithms RFC 2952 Telnet DES CFB Telnet Encryption: DES 64 bit Cipher Feedback Command and key-handling rules for DES cipher feedback in Telnet encryption. RFC 2953 Telnet DES OFB Telnet Encryption: DES 64 bit Output Feedback Command and key-handling rules for DES output feedback in Telnet encryption. RFC 2994 MISTY1 A Description of the MISTY1 Encryption Algorithm A block cipher algorithm with provable security against cryptanalysis. RFC 3058 IDEA in CMS Use of the IDEA Encryption Algorithm in CMS Adding IDEA encryption to secure email and messages RFC 3067 IODEF Requirements TERENA'S Incident Object Description and Exchange Format Requirements High-level requirements for a standard incident data exchange format between security teams. RFC 3079 Deriving Keys for use with Microsoft Point-to-Point Encryption (MPPE) How to derive encryption keys from passwords for Microsoft Point-to-Point Encryption RFC 3244 Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols Windows 2000 protocols for Kerberos password changes and administrative password setting. RFC 3607 Chinese Lottery Cryptanalysis Revisited: The Internet as a Codebreaking Tool How internet worms could crack encryption by brute force RFC 3628 Policy Requirements for Time-Stamping Authorities (TSAs) Security and operational rules for trusted services that sign digital timestamps RFC 3631 Security Mechanisms for the Internet An IAB guide to choosing among standard Internet security mechanisms, and to the ones to avoid. RFC 3653 XPath Filter 2.0 XML-Signature XPath Filter 2.0 A more efficient way to sign parts of an XML document RFC 3702 Authentication, Authorization, and Accounting Requirements for the Session Initiation Protocol (SIP) What SIP networks must do to check who you are, whether you can call, and what to bill RFC 3706 DPD A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers Telling when a secure tunnel peer has died without sending constant heartbeat messages RFC 3881 Healthcare Audit XML Security Audit and Access Accountability Message XML Data Definitions for Healthcare Applications Standard XML format for recording who accessed patient data and when. RFC 3884 IPsec for Routing Use of IPsec Transport Mode for Dynamic Routing How to secure routing exchanges between gateways without confusing network routing. RFC 3924 Lawful Intercept Cisco Architecture for Lawful Intercept in IP Networks A design for intercepting and monitoring communications in IP networks. RFC 4059 Warranty Cert Extension Internet X.509 Public Key Infrastructure Warranty Certificate Extension Adding warranty information to X.509 certificates RFC 4158 Cert path building Internet X.509 Public Key Infrastructure: Certification Path Building How to find the chain of certificates linking a public key to a trusted authority. RFC 4189 Requirements for End-to-Middle Security for the Session Initiation Protocol (SIP) Protecting SIP messages from some intermediaries while letting trusted ones inspect them. RFC 4322 Opportunistic encryption Opportunistic Encryption using the Internet Key Exchange (IKE) Encryption without prior arrangement, using DNS to distribute keys. RFC 4418 UMAC UMAC: Message Authentication Code using Universal Hashing A fast, provably-secure message authentication code using universal hashing. RFC 4503 Rabbit stream cipher A Description of the Rabbit Stream Cipher Algorithm A fast encryption algorithm designed for protocols processing large amounts of data. RFC 4621 MOBIKE design Design of the IKEv2 Mobility and Multihoming (MOBIKE) Protocol How to keep IPsec tunnels running when a device changes its IP address. RFC 4705 GigaBeam link encryption GigaBeam High-Speed Radio Link Encryption Encryption and key management for GigaBeam's high-speed point-to-point radio links. RFC 4746 EAP-PAX Extensible Authentication Protocol (EAP) Password Authenticated Exchange Lightweight authentication using a shared secret with optional key provisioning and identity protection. RFC 4763 EAP-SAKE Extensible Authentication Protocol Method for Shared-secret Authentication and Key Establishment (EAP-SAKE) EAP method for mutual authentication and key establishment using a shared secret. RFC 4784 Verizon Wireless Dynamic Mobile IP Key Update for cdma2000(R) Networks A secure way to update cryptographic keys in mobile networks. RFC 4793 EAP-POTP The EAP Protected One-Time Password Protocol (EAP-POTP) An authentication method for one-time password tokens over networks. RFC 4809 Requirements for an IPsec Certificate Management Profile How IPsec VPNs and certificate systems work together at scale RFC 4894 Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec How hash algorithm weaknesses affect IPsec and IKE security. RFC 5207 NAT and Firewall Traversal Issues of Host Identity Protocol (HIP) Communication Why NATs and firewalls get in the way of the Host Identity Protocol, and what could be done about it. RFC 5217 Memorandum for Multi-Domain Public Key Infrastructure Interoperability Making different digital ID systems trust each other across organizations. RFC 5419 MIPv6 Auth Option Why the Authentication Data Suboption is Needed for Mobile IPv6 (MIPv6) Why cellular networks need simpler authentication for Mobile IPv6. RFC 5421 EAP-FAST Password Basic Password Exchange within the Flexible Authentication via Secure Tunneling Extensible Authentication Protocol (EAP-FAST) How a plain username and password are carried safely inside the EAP-FAST encrypted tunnel. RFC 5458 ULE Security Security Requirements for the Unidirectional Lightweight Encapsulation (ULE) Protocol Security requirements for IP transmitted over MPEG-2 digital broadcast. RFC 5517 Cisco Private VLANs Cisco Systems' Private VLANs: Scalable Security in a Multi-Client Environment Isolate servers and devices while sharing one subnet and conserving VLAN IDs. RFC 5637 AAA for Mobile IPv6 Authentication, Authorization, and Accounting (AAA) Goals for Mobile IPv6 Design goals for adding authentication, authorization and accounting to mobile IP services RFC 5683 PAK Password-Authenticated Key (PAK) Diffie-Hellman Exchange Adding password-based mutual authentication to Diffie-Hellman key exchange. RFC 5765 P2P Security Security Issues and Solutions in Peer-to-Peer Systems for Realtime Communications Security challenges when real-time communication relies on peers instead of centralized servers. RFC 5803 SCRAM LDAP Schema Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted Challenge Response Authentication Mechanism (SCRAM) Secrets A defined layout for storing SCRAM authentication secrets in LDAP authPassword values. RFC 5868 Kerberos Cross-Realm Problem Statement on the Cross-Realm Operation of Kerberos Why authentication across organizational boundaries creates operational headaches. RFC 5877 pkix-attr-cert The application/pkix-attr-cert Media Type for Attribute Certificates Registers a MIME media type for carrying one attribute certificate. RFC 5879 ESP-NULL Heuristics Heuristics for Detecting ESP-NULL Packets Techniques for intermediate devices to detect unencrypted IPsec traffic without modifying endpoints. RFC 5904 RADIUS for 802.16 PKMv1 RADIUS Attributes for IEEE 802.16 Privacy Key Management Version 1 (PKMv1) Protocol Support RADIUS attributes for securing wireless broadband subscriptions RFC 5909 SEND proxy problem Securing Neighbor Discovery Proxy: Problem Statement Why secure neighbor discovery and address proxying are hard to combine RFC 5915 Elliptic Curve Private Key Structure A standard ASN.1 wrapper for storing or sending an elliptic curve private key together with its curve and public key. RFC 5916 Device Owner Attribute A certificate attribute to name a device's owner RFC 5917 Clearance Sponsor Attribute Recording who granted a security clearance in a digital certificate RFC 5930 AES-CTR for IKEv2 Using Advanced Encryption Standard Counter Mode (AES-CTR) with the Internet Key Exchange version 02 (IKEv2) Protocol A fast encryption method for protecting IKEv2 key exchange messages RFC 6070 PBKDF2 PKCS #5: Password-Based Key Derivation Function 2 (PBKDF2) Test Vectors Known input and output values for PBKDF2 using HMAC-SHA-1. RFC 6114 CLEFIA The 128-Bit Blockcipher CLEFIA A lightweight block cipher for constrained devices. RFC 6124 EAP-EKE An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol Password-based authentication that resists dictionary attacks and requires no certificates. RFC 6193 IKE in SDP Media Description for the Internet Key Exchange Protocol (IKE) in the Session Description Protocol (SDP) Negotiate secure tunnels directly in SIP video calls. RFC 6216 SIP security call flows Example Call Flows Using Session Initiation Protocol (SIP) Security Mechanisms Worked examples showing how SIP uses TLS and S/MIME to protect messages. RFC 6218 Cisco RADIUS keying Cisco Vendor-Specific RADIUS Attributes for the Delivery of Keying Material Secure attributes for delivering cryptographic keys and authenticating RADIUS messages. RFC 6252 MPA A Framework of Media-Independent Pre-Authentication (MPA) for Inter-Domain Handover Optimization A framework for speeding handovers when mobile devices move between different network domains. RFC 6267 MIKEY-IBAKE MIKEY-IBAKE: Identity-Based Authenticated Key Exchange (IBAKE) Mode of Key Distribution in Multimedia Internet KEYing (MIKEY) Key management for multimedia security using identity-based encryption and a trusted key service. RFC 6273 SEND hash threats The Secure Neighbor Discovery (SEND) Hash Threat Analysis Evaluating hash function vulnerabilities in secure neighbor discovery. RFC 6278 Static ECDH in CMS Use of Static-Static Elliptic Curve Diffie-Hellman Key Agreement in Cryptographic Message Syntax Long-term key agreement for encrypted, authenticated, and authenticated-encrypted messages RFC 6287 OCRA OCRA: OATH Challenge-Response Algorithm Challenge-response authentication using HOTP with configurable input parameters RFC 6411 RSVP keying Applicability of Keying Methods for RSVP Security Comparing methods to protect router-to-router messages in quality-of-service networks. RFC 6479 Anti-replay no shifting IPsec Anti-Replay Algorithm without Bit Shifting An efficient IPsec anti-replay algorithm that avoids bit-shifting operations. RFC 6538 HIP Experiment Report The Host Identity Protocol (HIP) Experiment Report Lessons learned from experimental deployments of the Host Identity Protocol. RFC 6539 IBAKE IBAKE: Identity-Based Authenticated Key Exchange Identity-based key exchange that avoids key escrow and provides mutual authentication. RFC 6664 S/MIME Key Capabilities S/MIME Capabilities for Public Key Definitions ASN.1 definitions for declaring support for public key algorithms and sizes. RFC 6684 IODEF Extension Guide Guidelines and Template for Defining Extensions to the Incident Object Description Exchange Format (IODEF) Template and guidelines for standardizing IODEF extensions RFC 6697 HOKEY Architecture Handover Keying (HOKEY) Architecture Design Architecture for reducing authentication delay when a device moves between network attachment points. RFC 6717 kx509 kx509 Kerberized Certificate Issuance Protocol in Use in 2012 Using Kerberos tickets to request X.509 certificates when Kerberos infrastructure already exists. RFC 6803 Camellia for Kerberos 5 Camellia Encryption for Kerberos 5 New encryption and checksum types for Kerberos using the Camellia block cipher. RFC 7008 KCipher-2 A Description of the KCipher-2 Encryption Algorithm A fast stream cipher algorithm using simple operations and multiple feedback shift registers RFC 7018 ADVPN Auto-Discovery VPN Problem Statement and Requirements Why hand-configuring IPsec tunnels between many sites does not scale, and what a dynamic fix must do. RFC 7034 X-Frame-Options HTTP Header Field X-Frame-Options The HTTP header that lets a site forbid other pages from displaying it in a frame, as a defense against clickjacking. RFC 7076 P6R's Secure Shell Public Key Subsystem Organize keys and certificates in namespaces over SSH. RFC 7093 Additional Methods for Generating Key Identifiers Values Additional example methods for generating X.509 certificate key identifiers. RFC 7165 Use Cases and Requirements for JSON Object Signing and Encryption (JOSE) Why JSON-based object security matters for web and cloud applications. RFC 7169 The NSA (No Secrecy Afforded) Certificate Extension An April 1st joke proposes a certificate label for keys shared with others. RFC 7229 Object Identifiers for Test Certificate Policies Eight certificate policy identifiers intended only for software testing. RFC 7397 Smart Object Security Report from the Smart Object Security Workshop What a 2012 workshop concluded about reusing existing security protocols on tiny, constrained smart objects. RFC 7458 EAP for Wi-Fi and EPC Extensible Authentication Protocol (EAP) Attributes for Wi-Fi Integration with the Evolved Packet Core Six new EAP-AKA attributes let a phone ask a trusted Wi-Fi network for the same services its cellular network offers. RFC 7520 JOSE Examples Examples of Protecting Content Using JSON Object Signing and Encryption (JOSE) Test vectors for signing and encrypting JSON objects. RFC 7546 GSS Negotiation Loop Structure of the Generic Security Service (GSS) Negotiation Loop The standard pattern for two parties to establish a secure connection. RFC 7568 Deprecating SSLv3 Deprecating Secure Sockets Layer Version 3.0 Why SSL version 3.0 is broken and must not be used, with replacements. RFC 7642 SCIM Overview System for Cross-domain Identity Management: Definitions, Overview, Concepts, and Requirements Moving user accounts between cloud services with a standard format. RFC 7651 IKEv2 P-CSCF Option 3GPP IP Multimedia Subsystems (IMS) Option for the Internet Key Exchange Protocol Version 2 (IKEv2) Adding a way for IPsec gateways to tell mobile clients where to find the IMS signaling server. RFC 7744 Use Cases for Authentication and Authorization in Constrained Environments How tiny gadgets prove who they are when they can't type passwords RFC 7832 ABFAB Use Cases Application Bridging for Federated Access Beyond Web (ABFAB) Use Cases Federated identity for non-web applications and services. RFC 7906 NSA's Cryptographic Message Syntax (CMS) Key Management Attributes Attributes for managing cryptographic keys in CMS packages RFC 7966 Diameter AVP Security Security at the Attribute-Value Pair (AVP) Level for Non-neighboring Diameter Nodes: Scenarios and Requirements End-to-end security for individual data elements in Diameter messages. RFC 8009 AES-SHA2 for Kerberos AES Encryption with HMAC-SHA2 for Kerberos 5 Modern encryption and integrity protection for Kerberos network authentication. RFC 8133 SESPAKE The Security Evaluated Standardized Password-Authenticated Key Exchange (SESPAKE) Protocol A cryptographic way to create a secure secret from a shared password RFC 8236 J-PAKE J-PAKE: Password-Authenticated Key Exchange by Juggling Secure key exchange using only a shared password, without PKI. RFC 8248 SACM Requirements Security Automation and Continuous Monitoring (SACM) Requirements Framework for automating security posture assessment and monitoring across networks. RFC 8269 ARIA in SRTP The ARIA Algorithm and Its Use with the Secure Real-Time Transport Protocol (SRTP) Secure real-time media using the ARIA block cipher. RFC 8351 PKCS #8 media type The PKCS #8 EncryptedPrivateKeyInfo Media Type Register the official MIME type for encrypted private key files. RFC 8409 SAML entity categories The Entity Category Security Assertion Markup Language (SAML) Attribute Types SAML attributes for categorizing and supporting identity federation entities RFC 8429 Deprecate Triple-DES (3DES) and RC4 in Kerberos Moving Kerberos away from weakening encryption methods for authentication security. RFC 8448 Example Handshake Traces for TLS 1.3 Worked examples for testing TLS 1.3 implementations RFC 8462 MaRNEW Workshop Report from the IAB Workshop on Managing Radio Networks in an Encrypted World (MaRNEW) How radio networks can optimize traffic as encryption becomes the norm. RFC 8479 Storing Validation Parameters in PKCS#8 Attaching validation proofs to stored RSA and DSA private keys. RFC 8649 Hash of Root Key Hash Of Root Key Certificate Extension Announcing the next root CA key so relying parties can smoothly transition RFC 8734 Brainpool for TLS 1.3 Elliptic Curve Cryptography (ECC) Brainpool Curves for Transport Layer Security (TLS) Version 1.3 Support for ECC Brainpool cryptographic curves in the latest TLS version RFC 8756 CNSA profile for CMC Commercial National Security Algorithm (CNSA) Suite Profile of Certificate Management over CMS Managing certificates using NSA-approved algorithms and CMC protocol. RFC 8769 CMS types for CBOR Cryptographic Message Syntax (CMS) Content Types for Concise Binary Object Representation (CBOR) Registers content types to wrap compact binary objects in cryptographic containers. RFC 8894 SCEP Simple Certificate Enrolment Protocol A simple protocol for devices to request and renew certificates over HTTP RFC 8998 ShangMi TLS 1.3 ShangMi (SM) Cipher Suites for TLS 1.3 Chinese cryptographic algorithms for secure web connections. RFC 9021 WalnutDSA COSE Use of the Walnut Digital Signature Algorithm with CBOR Object Signing and Encryption (COSE) A lightweight, quantum-resistant signature algorithm for small devices. RFC 9054 COSE Hash Algorithms CBOR Object Signing and Encryption (COSE): Hash Algorithms Naming and using standard hash functions in signed and encrypted messages. RFC 9124 IoT Firmware Manifest A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices What information a device needs to securely install a firmware update. RFC 9152 SODP Secure Object Delivery Protocol (SODP) Server Interfaces: NSA's Profile for Delivery of Certificates, Certificate Revocation Lists (CRLs), and Symmetric Keys to Clients NSA's specification for how secure servers deliver certificates, keys, and revocation lists to government devices. RFC 9185 DTLS Tunnel between a Media Distributor and Key Distributor to Facilitate Key Exchange A protocol for secure key exchange in multimedia conferences with selective transparency. RFC 9189 GOST TLS 1.2 GOST Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.2 Support for Russian cryptographic standards in secure web connections RFC 9191 Handling Large Certificates and Long Certificate Chains in TLS-Based EAP Methods Why big certificate chains break Wi-Fi and wired logins that use EAP-TLS, and the ways to shrink or work around them. RFC 9206 Commercial National Security Algorithm (CNSA) Suite Cryptography for Internet Protocol Security (IPsec) NSA's approved encryption standards for IPsec tunnels in national security systems RFC 9212 CNSA Suite for SSH Commercial National Security Algorithm (CNSA) Suite Cryptography for Secure Shell (SSH) NSA-approved cryptographic algorithms for securing government SSH connections. RFC 9216 S/MIME Test Certificates S/MIME Example Keys and Certificates Shared example keys and certificates for testing secure email implementations. RFC 9284 DOTS Multihoming Multihoming Deployment Considerations for DDoS Open Threat Signaling (DOTS) How to ask for DDoS help from multiple internet providers RFC 9321 SVT Signature Validation Token Proving a signature was valid at a specific time, so it can be verified later without the original. RFC 9333 Minimal ESP Minimal IP Encapsulating Security Payload (ESP) Which features of IP Encapsulating Security Payload can be left out on constrained devices. RFC 9367 GOST TLS 1.3 GOST Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.3 Russian cryptographic standards for secure web connections. RFC 9381 VRF Verifiable Random Functions (VRFs) The public-key version of a keyed hash function with proof of correctness. RFC 9383 SPAKE2+ SPAKE2+, an Augmented Password-Authenticated Key Exchange (PAKE) Protocol Password exchange where only the client needs to remember the password. RFC 9385 GOST IKEv2 Using GOST Cryptographic Algorithms in the Internet Key Exchange Protocol Version 2 (IKEv2) Using Russian cryptographic standards in IPsec key exchange. RFC 9387 DOTS Telemetry Use Cases Use Cases for DDoS Open Threat Signaling (DOTS) Telemetry Using detailed attack information to mitigate DDoS attacks more efficiently. RFC 9397 TEEP Architecture Trusted Execution Environment Provisioning (TEEP) Architecture How to securely install and manage trusted programs inside a protected computer enclave. RFC 9490 M-TEN workshop report Report from the IAB Workshop on Management Techniques in Encrypted Networks (M-TEN) Network management meets ubiquitous encryption RFC 9500 PKC test keys Standard Public Key Cryptography (PKC) Test Keys Well-known, publicly available cryptographic keys for testing, analogous to EICAR and GTUBE test files. RFC 9548 GOST PFX containers Generating Transport Key Containers (PFX) Using the GOST Algorithms How to package GOST cryptographic keys and certificates for secure storage and exchange. RFC 9563 SM2 for DNSSEC SM2 Digital Signature Algorithm for DNSSEC Digital signature method using SM2 elliptic curves and SM3 hashing RFC 9591 FROST The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures A cryptographic protocol for distributed digital signatures. RFC 9750 MLS architecture The Messaging Layer Security (MLS) Architecture How secure group messaging systems work RFC 9771 AEAD properties Properties of Authenticated Encryption with Associated Data (AEAD) Algorithms A dictionary of special properties that sealed algorithms can have RFC 9807 OPAQUE aPAKE The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol Mutual authentication using passwords without revealing them to the server RFC 9850 SSLKEYLOGFILE The SSLKEYLOGFILE Format for TLS A standardized format for logging TLS secrets to enable decryption of encrypted traffic. RFC 9858 HSS/LMS parameter sets Additional Parameter Sets for HSS/LMS Hash-Based Signatures Smaller hash-based signatures using alternative hash functions. RFC 9861 KangarooTwelve KangarooTwelve and TurboSHAKE Fast, parallelizable hash functions with variable-length output. RFC 9932 TLS in federations Mutually Authenticating TLS in the Context of Federations How organizations share secure connections with automatic identity verification. RFC 9941 sntrup761x25519-sha512 Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512 Post-quantum secure SSH key exchange combining two algorithms. RFC 9949 BUSA-TLS BUSA-TLS: Mandatory Audio Component (MAC) Pre-Shared Key (PSK) Derivation for TLS 1.3 Using 2 Live Crew's "Banned in the U.S.A." An April 1st joke replaces TLS 1.3's zero-byte input with a song digest. RFC 9955 Hybrid signatures Hybrid Signature Spectrums Taxonomy of design choices and security tradeoffs for hybrid digital signatures. RFC 10032 AEGIS AEAD The AEGIS Authenticated Encryption Algorithms Fast authenticated encryption algorithms built from the AES round function. RFC 10033 HBS state management Hash-Based Signatures: State and Backup Management Tracking and protecting one-time keys in quantum-resistant signatures RFC 10042 PQ/T hybrid kex for SSH Post-Quantum/Traditional Hybrid Key Exchange with the Module-Lattice-Based Key-Encapsulation Mechanism for Use in SSH Combining quantum-resistant and traditional key exchange in SSH RFC 1038 IP Security Option Draft revised IP security option Labeling packets with security classifications and protection authorities RFC 4402 Kerberos GSS-API PRF A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism A counter-based PRF+ construction for Kerberos V GSS-API contexts. RFC 4869 Suite B for IPsec Suite B Cryptographic Suites for IPsec Four pre-configured sets of encryption and authentication algorithms for IPsec aligned with NSA standards. RFC 5430 Suite B TLS Suite B Profile for Transport Layer Security (TLS) NSA-approved cryptography for Transport Layer Security RFC 2059 RADIUS Accounting RADIUS Accounting How to track who logged in, how long they stayed, and how much data they used. RFC 8813 ECC key usage Clarifications for Elliptic Curve Cryptography Subject Public Key Information Clarifies two key usage values for certificates using elliptic-curve algorithms. RFC 8951 EST Clarifications Clarification of Enrollment over Secure Transport (EST): Transfer Encodings and ASN.1 Fixes to the enrollment protocol for securing devices with certificates. RFC 8997 Deprecate TLS 1.1 Email Deprecation of TLS 1.1 for Email Submission and Access Email clients and servers should now require TLS 1.2 or later, not TLS 1.1, for submission and access. RFC 9155 No MD5/SHA-1 in TLS 1.2 Deprecating MD5 and SHA-1 Signature Hashes in TLS 1.2 and DTLS 1.2 Prohibits MD5 and SHA-1 for digital signatures in TLS 1.2 and DTLS 1.2. RFC 9295 Ed25519 Key Usage Clarifications for Ed25519, Ed448, X25519, and X448 Algorithm Identifiers Clarifies certificate key usage rules for four elliptic-curve algorithms. RFC 10007 CRL key usage check Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) Validation Requiring that CRL issuer certificates explicitly carry the cRLSign capability. RFC 1409 Telnet auth Telnet Authentication Option A way for Telnet client and server to agree on how to verify the user's identity RFC 5081 OpenPGP for TLS Using OpenPGP Keys for Transport Layer Security (TLS) Authentication TLS can authenticate using OpenPGP keys instead of X.509 certificates. RFC 1351 SNMP Admin Model SNMP Administrative Model Party-based security framework for administering SNMP management operations. RFC 912 Authentication service Authentication service A proposed TCP service that identifies the owner of a connection on the server system. RFC 4325 AIA CRL extension Internet X.509 Public Key Infrastructure Authority Information Access Certificate Revocation List (CRL) Extension Helping applications find CRL issuer certificates for certificate revocation checking. RFC 6711 LoA registry An IANA Registry for Level of Assurance (LoA) Profiles A searchable list of authentication strength levels used in identity systems RFC 8411 Crypto OID range IANA Registration for the Cryptographic Algorithm Object Identifier Range IANA registry rules for a donated object identifier range for cryptographic algorithms. RFC 8758 Deprecate RC4 in SSH Deprecating RC4 in Secure Shell (SSH) A best current practice prohibiting RC4 ciphers in SSH. RFC 9158 Update to the Object Identifier Registry for the PKIX Working Group Adds omitted PKIX object identifiers to an IANA registry. RFC 1004 COOKIE-JAR Distributed-protocol authentication scheme Secure authentication across different network trust domains using a trusted server. RFC 2523 Photuris Photuris: Extended Schemes and Attributes Extensible schemes and attributes for secure key agreement. RFC 2649 An LDAP Control and Schema for Holding Operation Signatures Digital signatures on LDAP directory changes to create an audit trail. RFC 2786 Diffie-Helman USM Key Management Information Base and Textual Convention Forward secrecy and device bootstrapping for SNMPv3 security RFC 3163 ISO/IEC 9798-3 Authentication SASL Mechanism A SASL authentication mechanism based on public key signatures using X.509 certificates. RFC 4764 EAP-PSK The EAP-PSK Protocol: A Pre-Shared Key Extensible Authentication Protocol (EAP) Method Lightweight authentication for wireless networks using only a shared secret. RFC 4767 IDXP The Intrusion Detection Exchange Protocol (IDXP) A protocol for intrusion detection systems to exchange alerts and analysis over a secure connection. RFC 5210 SAVA testbed A Source Address Validation Architecture (SAVA) Testbed and Deployment Experience A working prototype that validates IP source addresses to stop packet spoofing attacks across networks. RFC 5697 Other Certificates Extension An extension that lets linked certificates point back to each other so applications can recognize a renewed certificate. RFC 5981 NSLP authorization Authorization for NSIS Signaling Layer Protocols Authorization tokens so routers can verify that resource requests are legitimate RFC 6358 Additional Master Secret Inputs for TLS A framework for TLS extensions to add input to master-secret calculation. RFC 6537 HIP DHT Interface Host Identity Protocol Distributed Hash Table Interface Using distributed hash tables to look up Host Identity Protocol addresses RFC 6617 Secure PSK for IKE Secure Pre-Shared Key (PSK) Authentication for the Internet Key Exchange Protocol (IKE) Authentication method for IKE resistant to dictionary attacks with weak passwords RFC 6618 MIPv6 TLS Security Mobile IPv6 Security Framework Using Transport Layer Security for Communication between the Mobile Node and Home Agent Alternative security framework for Mobile IPv6 using TLS instead of IPsec RFC 6628 AugPAKE Efficient Augmented Password-Only Authentication and Key Exchange for IKEv2 Secure password-only authentication for IKEv2 without storing passwords on servers. RFC 6631 IKEv2 PACE Password Authenticated Connection Establishment with the Internet Key Exchange Protocol version 2 (IKEv2) Password Authenticated Connection Establishment integrated into IKEv2. RFC 6867 IKEv2 ERP An Internet Key Exchange Protocol Version 2 (IKEv2) Extension to Support EAP Re-authentication Protocol (ERP) A fast way to re-authenticate VPN connections using EAP without repeating the full authentication. RFC 8672 TLS identity pinning TLS Server Identity Pinning with Tickets TLS extensions that automatically detect when a server changes, using an encrypted secret shared on the first connection. RFC 8902 TLS Authentication Using Intelligent Transport System (ITS) Certificates Adding ITS vehicle certificates to TLS secure connections RFC 9102 TLS DNSSEC Chain TLS DNSSEC Chain Extension Carrying DNS security proofs inside the TLS handshake RFC 9891 ACME DTN node ID Automated Certificate Management Environment (ACME) Delay-Tolerant Networking (DTN) Node ID Validation Extension How a certificate authority can check that a client really controls a Delay-Tolerant Networking node name before issuing it a certificate. RFC 7569 MAC Label Registry Registry Specification for Mandatory Access Control (MAC) Security Label Formats A registry that lets many different security label formats share one numbered list instead of forcing a single format. RFC 7410 A Property Types Registry for the Authentication-Results Header Field A registry for property types in the Authentication-Results email header. RFC 4718 IKEv2 clarifications IKEv2 Clarifications and Implementation Guidelines Clarifications and implementation guidance for the IKEv2 key exchange protocol. RFC 5748 IANA Registry Update for Support of the SEED Cipher Algorithm in Multimedia Internet KEYing (MIKEY) Adds SEED algorithm code points to MIKEY registries for SRTP and SRTCP. RFC 6932 Brainpool Elliptic Curves for the Internet Key Exchange (IKE) Group Description Registry Four Brainpool elliptic curves get code points in the IKE Group Description registry so other protocols can name them. RFC 7762 Initial Assignment for the Content Security Policy Directives Registry How Content Security Policy directives are documented and registered. RFC 8809 WebAuthn registries Registries for Web Authentication (WebAuthn) Official IANA registries for WebAuthn features. RFC 1455 Physical Link Security Type of Service A Type of Service marking for routing over more physically secure network links. RFC 644 On the problem of signature authentication for network mail A proposal for marking network mail authenticated by its source host. RFC 1353 SNMP Parties MIB Definitions of Managed Objects for Administration of SNMP Parties Management objects for administering SNMP party-based security RFC 1414 Ident MIB Identification MIB Ask the network management system who owns a TCP connection. RFC 1910 SNMPv2 USM User-based Security Model for SNMPv2 Security model for SNMPv2 using user identity, authentication, and encryption.