Areas / Security

Security

TLS, PKI, authentication and cryptography.

1384 RFCs · 1384 with AI ELI5 · 0 summaries · 0 index pages

With AI ELI5 1384

RFC 5280 X.509 Certificates Internet X.509 Public Key Infrastructure Certificate and CRL Profile The PKI framework that underpins digital trust on the Internet, defining the format for digital certificates used in TLS, code signing, and email security. RFC 7296 IKEv2 Internet Key Exchange Protocol Version 2 (IKEv2) How two machines prove who they are and agree on the keys that protect an IPsec tunnel. RFC 5652 CMS Cryptographic Message Syntax (CMS) The standard envelope for signing, sealing and authenticating data of any kind. RFC 4120 Kerberos V5 The Kerberos Network Authentication Service (V5) How you prove who you are to many servers while typing your password once and never sending it. RFC 2865 RADIUS Remote Authentication Dial In User Service (RADIUS) How a network access server asks one central database whether to let a user in, and on what terms. RFC 3711 SRTP The Secure Real-time Transport Protocol (SRTP) How voice and video calls get encrypted and tamper-proofed without making the packets much bigger. RFC 3414 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) How SNMPv3 proves who sent a management message, spots tampering and replays, and can hide the contents. RFC 4301 IPsec Architecture Security Architecture for the Internet Protocol The blueprint for IPsec: how security associations and three databases decide which IP packets get protected, dropped or passed through. RFC 3748 EAP Extensible Authentication Protocol (EAP) A flexible envelope that lets a network ask a device to prove who it is, using almost any authentication method. RFC 3971 SEND SEcure Neighbor Discovery (SEND) How IPv6 neighbors and routers prove who they are on a local link, using signatures instead of IPsec. RFC 6749 OAuth 2.0 The OAuth 2.0 Authorization Framework The authorization framework that powers "Sign in with Google/GitHub/Facebook" and API access delegation across the modern web. RFC 3279 Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile The names and byte layouts certificates use to say which hash, signature and public key algorithms they rely on. RFC 9052 COSE CBOR Object Signing and Encryption (COSE): Structures and Process The message formats for signing, MACing and encrypting CBOR data, and for writing cryptographic keys in CBOR. RFC 2104 HMAC HMAC: Keyed-Hashing for Message Authentication A way to turn any ordinary hash function into a keyed integrity check that only holders of a shared secret can produce. RFC 2827 Ingress filtering Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing Why providers should drop outgoing packets whose source addresses do not belong to the network they came from. RFC 4121 Kerberos GSS-API v2 The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2 How Kerberos 5 plugs into the GSS-API, with new message-protection tokens that work with any Kerberos cipher. RFC 6066 TLS Extensions Transport Layer Security (TLS) Extensions: Extension Definitions Six optional add-ons that let a TLS client tell a server which site it wants, and ask for less work on small devices. RFC 7519 JWT JSON Web Token (JWT) A compact, URL-safe token format for securely transmitting claims between parties. RFC 2743 GSS-API v2 update 1 Generic Security Service Application Program Interface Version 2, Update 1 One programming interface that lets applications authenticate peers and protect messages without caring which security mechanism sits underneath. RFC 9325 TLS/DTLS Best Practices Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) The current checklist for configuring TLS and DTLS so they actually protect your traffic. RFC 1321 MD5 The MD5 Message-Digest Algorithm The 128-bit fingerprint algorithm that turns a message of any length into a short digest. RFC 5912 PKIX ASN.1 modules New ASN.1 Modules for the Public Key Infrastructure Using X.509 (PKIX) The PKIX certificate formats rewritten in the 2002 version of ASN.1, with identical bits on the wire. RFC 4250 SSH numbers The Secure Shell (SSH) Protocol Assigned Numbers The starting contents and rules of the IANA registries for SSH message numbers, reason codes, terminal modes and algorithm names. RFC 3370 CMS algorithms Cryptographic Message Syntax (CMS) Algorithms Which digest, signature, key-management, encryption and MAC algorithms a CMS implementation must follow, and how. RFC 4086 Randomness for Security Randomness Requirements for Security Why a secret key is only as strong as the dice that rolled it. RFC 3704 BCP 84 Ingress Filtering for Multihomed Networks How routers can drop packets with forged source addresses without breaking networks that connect to more than one ISP. RFC 3972 CGA Cryptographically Generated Addresses (CGA) IPv6 addresses whose last 64 bits are a hash of the owner's public key, so the address itself proves who owns it. RFC 6750 OAuth 2.0 Bearer Tokens The OAuth 2.0 Authorization Framework: Bearer Token Usage How a client shows an OAuth access token to an API, and what the API says when the token is wrong. RFC 5705 TLS Exporters Keying Material Exporters for Transport Layer Security (TLS) How a TLS session can hand out fresh, independent keys to the protocols that ride on top of it. RFC 5216 EAP-TLS The EAP-TLS Authentication Protocol How a device and a network prove who they are to each other with certificates, carried inside EAP. RFC 4252 SSH Authentication The Secure Shell (SSH) Authentication Protocol How an SSH server decides who you are, once the encrypted tunnel is up. RFC 5764 DTLS-SRTP Datagram Transport Layer Security (DTLS) Extension to Establish Keys for the Secure Real-time Transport Protocol (SRTP) How two endpoints use a DTLS handshake on the media path to get the keys that protect their SRTP audio and video. RFC 4303 IPsec ESP IP Encapsulating Security Payload (ESP) The IPsec packet wrapper that encrypts and authenticates IP traffic, and spots replayed packets. RFC 4556 PKINIT Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Lets a Kerberos client prove who it is with a certificate and private key instead of a password-derived key. RFC 7030 EST Enrollment over Secure Transport How a device safely asks a certificate authority for its certificates over HTTPS. RFC 7481 RDAP security Security Services for the Registration Data Access Protocol (RDAP) How RDAP gets access control, authentication, confidentiality and integrity by leaning on HTTP and TLS. RFC 3830 MIKEY MIKEY: Multimedia Internet KEYing A lightweight key management protocol that sets up encryption keys for calls and streams in one round trip. RFC 4279 TLS-PSK Pre-Shared Key Ciphersuites for Transport Layer Security (TLS) How TLS can authenticate with a secret both sides already hold, instead of certificates. RFC 1994 PPP CHAP PPP Challenge Handshake Authentication Protocol (CHAP) How one end of a PPP link checks the other's identity with a random challenge and a hashed reply. RFC 6960 OCSP X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP How a program asks a server, in real time, whether a digital certificate has been revoked. RFC 5176 RADIUS CoA/DM Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS) How a RADIUS server can reach out to a network access server to disconnect a user or change their authorization mid-session. RFC 8253 PCEPS PCEPS: Usage of TLS to Provide a Secure Transport for the Path Computation Element Communication Protocol (PCEP) How PCEP sessions switch on TLS with a new StartTLS message instead of a separate port. RFC 1964 Kerberos 5 GSS-API The Kerberos Version 5 GSS-API Mechanism How GSS-API programs carry Kerberos version 5 tickets, per-message protection and names, byte by byte. RFC 9147 DTLS 1.3 The Datagram Transport Layer Security (DTLS) Protocol Version 1.3 TLS 1.3 adapted for datagrams: the same security, but built to survive lost, reordered and duplicated packets. RFC 2747 RSVP Cryptographic Authentication Signing every RSVP message at each hop so forged or replayed reservations are rejected. RFC 4072 Diameter EAP Diameter Extensible Authentication Protocol (EAP) Application How a network access server hands EAP authentication to a back-end Diameter server and gets the verdict and keys back. RFC 3174 SHA-1 US Secure Hash Algorithm 1 (SHA1) The SHA-1 hash algorithm written out for the Internet community, with reference C code. RFC 3961 Kerberos 5 Crypto Encryption and Checksum Specifications for Kerberos 5 The plug-in socket that lets Kerberos 5 swap encryption and checksum algorithms without changing the protocol. RFC 8224 SIP Identity Authenticated Identity Management in the Session Initiation Protocol (SIP) How a SIP network signs who is calling, so the receiver can check instead of trusting the From header. RFC 3723 Securing IP Storage Securing Block Storage Protocols over IP How to protect iSCSI, iFCP, FCIP and their discovery protocols with IPsec and IKE. RFC 5288 AES-GCM for TLS AES Galois Counter Mode (GCM) Cipher Suites for TLS Twelve TLS 1.2 cipher suites that encrypt and authenticate each record in one step with AES in Galois Counter Mode. RFC 4211 CRMF Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF) The message format for asking a Certification Authority to issue an X.509 certificate. RFC 2986 PKCS #10 PKCS #10: Certification Request Syntax Specification Version 1.7 The standard form for asking a certificate authority to turn your public key into a certificate. RFC 5480 ECC public key info Elliptic Curve Cryptography Subject Public Key Information How an elliptic curve public key is written into an X.509 certificate, and which curves and key uses are allowed. RFC 6158 RADIUS Guidelines RADIUS Design Guidelines Rules of thumb for inventing new RADIUS attributes so that existing servers and clients can keep working. RFC 3579 RADIUS EAP RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP) How a network access server can pass any EAP login method to a RADIUS server without understanding it. RFC 2744 GSS-API C bindings Generic Security Service API Version 2 : C-bindings The exact C functions, types and status codes programmers use to call the Generic Security Service API. RFC 5802 SCRAM Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms A password login that proves you know the password without ever sending it, and also lets you check the server. RFC 2289 OTP A One-Time Password System A login scheme where every password works exactly once, so a captured password is useless to an eavesdropper. RFC 7301 TLS ALPN Transport Layer Security (TLS) Application-Layer Protocol Negotiation Extension How a TLS client and server agree on the application protocol, such as HTTP/1.1, during the handshake itself. RFC 8551 S/MIME 4.0 Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Message Specification How to sign, encrypt and compress MIME messages so email can be authenticated and kept private. RFC 4513 LDAP authentication Lightweight Directory Access Protocol (LDAP): Authentication Methods and Security Mechanisms How LDAP clients prove who they are and protect the connection: StartTLS, simple Bind and SASL. RFC 9846 TLS 1.3 The Transport Layer Security (TLS) Protocol Version 1.3 How two programs agree on secret keys, prove who they are, and then talk privately over an open network. RFC 2203 RPCSEC_GSS RPCSEC_GSS Protocol Specification How ONC RPC services get authentication, integrity and privacy by plugging into the GSS-API. RFC 3161 TSP Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) A request and response format for getting a trusted authority to sign proof that data existed before a given time. RFC 5920 MPLS security framework Security Framework for MPLS and GMPLS Networks A catalogue of the ways MPLS and GMPLS networks can be attacked, and the defenses providers can choose from. RFC 7935 RPKI Algorithms The Profile for Algorithms and Key Sizes for Use in the Resource Public Key Infrastructure The one agreed set of signature and hash algorithms and key sizes that every RPKI participant uses. RFC 4055 RSA-PSS/OAEP in X.509 Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile How certificates and CRLs identify RSA-PSS signatures, RSA-OAEP keys and SHA-2 hashes. RFC 5247 EAP Key Management Extensible Authentication Protocol (EAP) Key Management Framework How the keys made by EAP login methods are named, scoped, handed to the network and kept safe. RFC 7518 JWA JSON Web Algorithms (JWA) The menu of named signature, key-wrapping, content-encryption and key-type algorithms that JSON Web Signature, Encryption and Key can use. RFC 8018 PKCS #5: Password-Based Cryptography Specification Version 2.1 How to turn a short password into a strong key, and use it for encryption and message authentication. RFC 4302 IPsec AH IP Authentication Header A tamper-evident seal for IP packets: proves who sent them, that nobody altered them, and that they are not replays. RFC 4422 SASL Simple Authentication and Security Layer (SASL) A plug-in framework that lets any connection-oriented protocol use any authentication mechanism, with an optional protection layer. RFC 4254 SSH Connection The Secure Shell (SSH) Connection Protocol How one encrypted SSH connection carries shells, commands and tunnels at the same time. RFC 3118 DHCP Auth Authentication for DHCP Messages A DHCP option that lets clients and servers prove who sent a message and that it was not tampered with. RFC 5191 PANA Protocol for Carrying Authentication for Network Access (PANA) A UDP-based way to carry EAP authentication between a client and an access network, whatever the link layer. RFC 4732 DoS considerations Internet Denial-of-Service Considerations A survey of how Internet systems can be knocked out by overload, and which defenses help or backfire. RFC 5116 AEAD An Interface and Algorithms for Authenticated Encryption One interface for ciphers that hide data and prove it was not changed, plus a registry and four AES-based algorithms. RFC 7515 JWS JSON Web Signature (JWS) A JSON-based way to sign or MAC any content so recipients can check it was not changed. RFC 3162 RADIUS IPv6 RADIUS and IPv6 Six new RADIUS attributes that let network access servers hand out IPv6 addresses, prefixes and routes. RFC 4851 EAP-FAST The Flexible Authentication via Secure Tunneling Extensible Authentication Protocol Method (EAP-FAST) An EAP method that builds a TLS tunnel first, then does password-style login safely inside it. RFC 5281 EAP-TTLSv0 Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0) A TLS tunnel for network login, so old password protocols can be used without exposing them to eavesdroppers. RFC 7643 SCIM Core Schema System for Cross-domain Identity Management: Core Schema A shared JSON vocabulary for describing users, groups and other identities so that systems stop inventing their own. RFC 7644 SCIM Protocol System for Cross-domain Identity Management: Protocol The HTTP and JSON protocol for creating, finding, changing and deleting users and groups across organizations. RFC 5042 DDP/RDMAP Security Direct Data Placement Protocol (DDP) / Remote Direct Memory Access Protocol (RDMAP) Security A threat analysis of RDMA network cards: what attackers can do to DDP and RDMAP, and the countermeasures that are required. RFC 6614 RADIUS over TLS Transport Layer Security (TLS) Encryption for RADIUS How to wrap RADIUS in a TLS session over TCP so that logins and accounting travel encrypted and peers can verify each other with certificates. RFC 8226 STIR Certificates Secure Telephone Identity Credentials: Certificates How X.509 certificates can prove that a caller is allowed to use a telephone number. RFC 3779 X.509 Extensions for IP Addresses and AS Identifiers Two certificate extensions that say which IP address blocks and AS numbers a key holder may use. RFC 3776 MIPv6 IPsec Using IPsec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents Exactly which headers, policies and key exchanges protect a roaming IPv6 device's conversations with its home agent. RFC 4616 SASL PLAIN The PLAIN Simple Authentication and Security Layer (SASL) Mechanism A one-message username and password login for SASL, safe only when the connection is already encrypted. RFC 4642 NNTP over TLS Using Transport Layer Security (TLS) with Network News Transfer Protocol (NNTP) How an NNTP news client and server upgrade a plain connection to an encrypted TLS one with the STARTTLS command. RFC 5801 GS2 Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family A bridge that lets any suitable GSS-API security mechanism be used as a SASL login method, with optional channel binding. RFC 6234 SHA-256/384/512 US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF) Open-source reference code for the US SHA-2 hash functions, plus SHA-based HMAC and HKDF. RFC 4107 Key Mgmt Guidelines Guidelines for Cryptographic Key Management When a protocol must use automated key management, and the narrow cases where manual keying is acceptable. RFC 4187 EAP-AKA Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA) How a SIM card's secret can log a device into any network that speaks EAP, with mutual authentication. RFC 5425 Syslog over TLS Transport Layer Security (TLS) Transport Mapping for Syslog How to carry syslog messages over a TLS connection so they cannot be read, changed or faked in transit. RFC 5763 DTLS-SRTP Framework Framework for Establishing a Secure Real-time Transport Protocol (SRTP) Security Context Using Datagram Transport Layer Security (DTLS) How SIP calls agree on encryption keys over the media path by exchanging only certificate fingerprints in SDP. RFC 5929 TLS channel bindings Channel Bindings for TLS Three ways to tie an application login to the exact TLS connection it runs over. RFC 5958 Asymmetric Key Packages Asymmetric Key Packages A standard container for private keys and their attributes, which CMS can then sign or encrypt. RFC 5869 HKDF HMAC-based Extract-and-Expand Key Derivation Function (HKDF) A simple recipe for turning one source of secret key material into as many strong keys as a protocol needs. RFC 4462 GSS-API for SSH Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol How SSH can reuse a GSS-API login, such as Kerberos, to authenticate the server and the user. RFC 4680 TLS supplemental data TLS Handshake Message for Supplemental Data A TLS handshake message that carries extra application data, such as authorization hints, alongside the normal handshake. RFC 6105 RA Guard IPv6 Router Advertisement Guard Letting the switches on a shared IPv6 link drop router announcements that do not come from real routers. RFC 7292 PKCS #12 PKCS #12: Personal Information Exchange Syntax v1.1 The PFX file format for carrying private keys and certificates between machines, now under IETF change control. RFC 5289 ECC GCM Cipher Suites TLS Elliptic Curve Cipher Suites with SHA-256/384 and AES Galois Counter Mode (GCM) Sixteen TLS cipher suites that pair elliptic curve key exchange with SHA-256/384 and AES-GCM. RFC 8308 SSH ext-info Extension Negotiation in the Secure Shell (SSH) Protocol How an SSH client and server privately tell each other which optional features they support. RFC 8410 Ed25519 in X.509 Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure The object identifiers and encodings that let X.509 certificates carry Ed25519, Ed448, X25519 and X448 keys. RFC 3275 XML-DSig (Extensible Markup Language) XML-Signature Syntax and Processing The XML syntax and processing rules for signing any data, built around a Signature element that digests and signs references. RFC 8221 ESP/AH Crypto Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH) Which encryption, authentication and compression algorithms IPsec implementations must, should or must not support. RFC 5083 CMS AuthEnveloped Cryptographic Message Syntax (CMS) Authenticated-Enveloped-Data Content Type A CMS wrapper that encrypts a message and proves nobody changed it, in a single pass, for any number of recipients. RFC 3962 Kerberos AES Advanced Encryption Standard (AES) Encryption for Kerberos 5 How Kerberos 5 gained AES encryption, with keys derived from passwords by PBKDF2 and no message padding. RFC 7465 Prohibiting RC4 Cipher Suites TLS clients and servers must never negotiate the RC4 stream cipher, in any TLS version. RFC 3580 802.1X RADIUS IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines How a switch or Wi-Fi access point should fill in RADIUS messages when it checks who may join the network. RFC 5448 EAP-AKA' Improved Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA') A small revision of EAP-AKA that ties the session keys to the access network name and moves to SHA-256. RFC 5911 CMS ASN.1 modules New ASN.1 Modules for Cryptographic Message Syntax (CMS) and S/MIME The same CMS and S/MIME formats on the wire, with their ASN.1 descriptions rewritten in the 2002 version of the notation. RFC 9053 COSE Algorithms CBOR Object Signing and Encryption (COSE): Initial Algorithms The starter menu of signature, MAC, encryption and key-distribution algorithms for COSE messages. RFC 3526 MODP DH Groups More Modular Exponential (MODP) Diffie-Hellman Groups for IKE Six standard prime groups, from 1536 to 8192 bits, for the Diffie-Hellman step in IKE. RFC 3749 TLS compression Transport Layer Security Protocol Compression Methods Gives TLS a standard compression method (DEFLATE) and a numbering scheme for adding more. RFC 4785 Pre-Shared Key (PSK) Ciphersuites with NULL Encryption for Transport Layer Security (TLS) Three TLS pre-shared key ciphersuites that authenticate and protect integrity without encrypting. RFC 8032 EdDSA Edwards-Curve Digital Signature Algorithm (EdDSA) A modern digital signature scheme on Edwards curves, with small keys, deterministic signatures and two recommended variants. RFC 7589 NETCONF over TLS Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication How NETCONF device-management sessions run over TLS, with both sides proving who they are using X.509 certificates. RFC 6819 OAuth Threat Model OAuth 2.0 Threat Model and Security Considerations A catalog of the ways OAuth 2.0 can be attacked, each paired with the countermeasures that blunt it. RFC 7146 Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3 Updates the IPsec rules for iSCSI and similar storage protocols to IPsec v3 and retires 3DES as the mandatory cipher. RFC 9190 EAP-TLS 1.3 EAP-TLS 1.3: Using the Extensible Authentication Protocol with TLS 1.3 How certificate-based network logins (EAP-TLS) use TLS 1.3 for forward secrecy, hidden identities and mandatory revocation checks. RFC 8017 PKCS#1 v2.2 PKCS #1: RSA Cryptography Specifications Version 2.2 The reference recipe for RSA encryption and signatures: keys, padding schemes and the math underneath. RFC 5056 Channel Bindings On the Use of Channel Bindings to Secure Channels How to prove that an application-level login and the secure channel underneath it share the same two ends. RFC 7517 JWK JSON Web Key (JWK) A standard way to write a cryptographic key, or a whole set of keys, as plain JSON. RFC 3948 UDP Encapsulation of ESP UDP Encapsulation of IPsec ESP Packets Wrapping IPsec ESP packets inside UDP so they can cross NAT devices that only understand TCP and UDP. RFC 5906 NTP Autokey Network Time Protocol Version 4: Autokey Specification How an NTP client can check that its time server is genuine, without making the server remember every client. RFC 3394 AES Key Wrap Advanced Encryption Standard (AES) Key Wrap Algorithm How to encrypt one cryptographic key with another using AES, with a built-in integrity check. RFC 4949 Security Glossary Internet Security Glossary, Version 2 A 334-page dictionary of security terms that tells RFC authors which words and definitions to use, and which to avoid. RFC 4217 Securing FTP with TLS How FTP clients and servers upgrade to TLS using the AUTH, PBSZ, PROT and CCC commands. RFC 4419 SSH DH Group Exchange Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol Lets an SSH server pick fresh Diffie-Hellman groups on demand instead of everyone using one fixed group. RFC 4962 AAA Key Management Guidance for Authentication, Authorization, and Accounting (AAA) Key Management Rules of thumb for anyone designing the key handoff between a login server, a network device and a user. RFC 5487 PSK TLS GCM suites Pre-Shared Key Cipher Suites for TLS with SHA-256/384 and AES Galois Counter Mode Eighteen new TLS cipher suites that pair a pre-shared key with SHA-256/384 and AES in Galois Counter Mode. RFC 6520 TLS Heartbeat Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Heartbeat Extension A keep-alive and probing message for TLS and DTLS that works without renegotiating. RFC 9338 COSE Countersignatures CBOR Object Signing and Encryption (COSE): Countersignatures A corrected way for a second party to sign off on any COSE message, not just signed ones. RFC 7343 ORCHIDv2 An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers Version 2 (ORCHIDv2) A special IPv6-looking prefix for hash-based identifiers that name endpoints, not network locations. RFC 3602 AES-CBC for IPsec The AES-CBC Cipher Algorithm and Its Use with IPsec How to use AES in CBC mode, with a fresh random IV in every packet, to encrypt IPsec ESP traffic. RFC 4106 AES-GCM in ESP The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP) How to use AES in Galois/Counter Mode so IPsec ESP can encrypt and authenticate packets in a single fast pass. RFC 4111 PPVPN Security Security Framework for Provider-Provisioned Virtual Private Networks (PPVPNs) A checklist of threats, defenses and requirements for VPNs that a service provider builds and runs for its customers. RFC 4568 SDP Security (SDES) Session Description Protocol (SDP) Security Descriptions for Media Streams How to put the secret key for an encrypted call into the call description itself, so both sides can set up SRTP in one round trip. RFC 5746 TLS Renegotiation Transport Layer Security (TLS) Renegotiation Indication Extension A TLS extension that ties each renegotiation to the handshake before it, closing a splicing attack. RFC 6454 Web Origin The Web Origin Concept What a web origin is, how browsers compare it, and the HTTP Origin header that reports it. RFC 6929 RADIUS Extensions Remote Authentication Dial In User Service (RADIUS) Protocol Extensions How RADIUS got more attribute numbers, grouped attributes and values longer than 253 octets without breaking old software. RFC 7516 JWE JSON Web Encryption (JWE) How to put encrypted data into a JSON-friendly package that can be compact or can serve many recipients. RFC 8392 CWT CBOR Web Token (CWT) JWT's compact cousin: signed or encrypted claims encoded in CBOR instead of JSON, for small devices. RFC 8555 ACME Automatic Certificate Management Environment (ACME) The protocol behind Let's Encrypt that automated certificate issuance and renewal, bringing free HTTPS to the entire web. RFC 7970 IODEF v2 The Incident Object Description Exchange Format Version 2 A common XML format for security teams to share incident reports, response requests and threat indicators. RFC 3766 Key Strength Matching Determining Strengths For Public Keys Used For Exchanging Symmetric Keys How big must a public key be so it is not the weak link protecting a symmetric key? RFC 7748 Curve25519 and Curve448 Elliptic Curves for Security Two elliptic curves, Curve25519 and Curve448, chosen by a published recipe and built to resist timing attacks. RFC 8725 JWT best practices JSON Web Token Best Current Practices A checklist of known JSON Web Token pitfalls and the minimum rules that avoid them. RFC 8613 OSCORE Object Security for Constrained RESTful Environments (OSCORE) Application-layer encryption for CoAP that stays intact end to end, even when proxies sit in the middle. RFC 6151 MD5 Security Update Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms A short update saying MD5 must not be used where collision resistance matters, and HMAC-MD5 should not be chosen for new designs. RFC 5403 RPCSEC_GSS v2 RPCSEC_GSS Version 2 RPCSEC_GSS gains channel bindings, so RPC traffic can safely lean on an already-secure channel underneath. RFC 7435 Opportunistic Security Opportunistic Security: Some Protection Most of the Time Encrypt whenever both sides can, authenticate whenever possible, and stop treating cleartext as the only alternative to perfect. RFC 8573 NTP MAC Message Authentication Code for the Network Time Protocol NTP packet authentication moves from MD5 to AES-CMAC, because MD5 is not a secure MAC. RFC 9146 DTLS Connection ID Connection Identifier for DTLS 1.2 A connection identifier in the DTLS 1.2 record header, so a session survives a change of IP address or port. RFC 9202 Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE) How a tiny device and a client use DTLS and access tokens to decide who may access what, with a bigger server doing the thinking. RFC 9427 EAP Types for TLS 1.3 TLS-Based Extensible Authentication Protocol (EAP) Types for Use with TLS 1.3 How EAP methods built on TLS, such as TEAP, EAP-FAST, EAP-TTLS and PEAP, move to TLS 1.3. RFC 3756 IPv6 Neighbor Discovery (ND) Trust Models and Threats Three ways to think about who you can trust on a local IPv6 link, and the catalog of Neighbor Discovery attacks each one faces. RFC 6090 ECC Algorithms Fundamental Elliptic Curve Cryptography Algorithms The original, unoptimized recipes for elliptic curve Diffie-Hellman and ElGamal-style signatures, written down in one citable place. RFC 8247 IKEv2 Algorithms Algorithm Implementation Requirements and Usage Guidance for the Internet Key Exchange Protocol Version 2 (IKEv2) Which cryptographic algorithms IKEv2 implementations must, should and must not support, so VPN peers can always agree. RFC 10002 CMC Certificate Management over CMS (CMC) A certificate enrollment protocol built on CMS: how clients ask a CA for certificates and how the CA answers. RFC 10003 CMC transport Certificate Management over CMS (CMC): Transport Protocols How certificate requests and responses travel between clients and a certificate authority: over HTTP, as files, by mail, or over raw TCP. RFC 7542 NAI The Network Access Identifier The user@realm format for identifying who is asking for network access, so requests can be routed to the right home domain. RFC 2404 HMAC-SHA-1-96 The Use of HMAC-SHA-1-96 within ESP and AH How IPsec uses HMAC with SHA-1, cut down to 96 bits, to prove a packet is genuine and unaltered. RFC 2631 DH Key Agreement Diffie-Hellman Key Agreement Method How two parties use Diffie-Hellman to agree on a secret and turn it into keying material for encrypting a message. RFC 3565 AES in CMS Use of the Advanced Encryption Standard (AES) Encryption Algorithm in Cryptographic Message Syntax (CMS) How to use AES to encrypt message content in the Cryptographic Message Syntax, including how the content key is wrapped for recipients. RFC 4555 MOBIKE IKEv2 Mobility and Multihoming Protocol (MOBIKE) How a VPN tunnel can keep running when either end changes its IP address, without starting over. RFC 5080 RADIUS Issues Common Remote Authentication Dial In User Service (RADIUS) Implementation Issues and Suggested Fixes A field guide to the ambiguities and bugs that kept showing up in RADIUS clients and servers, with the fixes the IETF recommends. RFC 7662 OAuth Introspection OAuth 2.0 Token Introspection How a protected API asks the authorization server whether an OAuth 2.0 token is still good, and what it grants. RFC 8414 OAuth AS metadata OAuth 2.0 Authorization Server Metadata A JSON document at a well-known URL that tells an OAuth client where an authorization server's endpoints are. RFC 8827 WebRTC security arch WebRTC Security Architecture How a browser keeps WebRTC calls private and verified, even when the calling website is not fully trusted. RFC 1858 IP Fragment Filtering Security Considerations for IP Fragment Filtering How chopping a packet into odd-sized IP fragments can slip a forbidden TCP packet past a router's filter, and the simple rules that stop it. RFC 2315 PKCS #7 v1.5 PKCS #7: Cryptographic Message Syntax Version 1.5 A general envelope format for data that can be signed, encrypted, digested or any nesting of those. RFC 2945 SRP The SRP Authentication and Key Exchange System Prove you know a password to a server without ever sending it, and end up with a shared session key. RFC 5091 IBCS #1 Identity-Based Cryptography Standard (IBCS) #1: Supersingular Curve Implementations of the BF and BB1 Cryptosystems The algorithms for encrypting to someone using only their identity, such as an email address, as the public key. RFC 5723 IKEv2 Resumption Internet Key Exchange Protocol Version 2 (IKEv2) Session Resumption How an IKEv2 client can quickly resume a dropped VPN session with a ticket instead of authenticating all over again. RFC 5754 Using SHA2 Algorithms with Cryptographic Message Syntax Which identifiers and parameters to use when SHA-224, SHA-256, SHA-384 and SHA-512 appear in signed or digested CMS messages. RFC 7591 OAuth Dynamic Registration OAuth 2.0 Dynamic Client Registration Protocol How an OAuth 2.0 client signs itself up with an authorization server and gets its client identifier on the fly. RFC 5755 Attribute Cert Profile An Internet Attribute Certificate Profile for Authorization How to use X.509 attribute certificates to carry roles, groups and clearances, separate from a person's identity certificate. RFC 6545 RID Real-time Inter-network Defense (RID) A common message format for service providers and response teams to ask each other to trace and stop attacks. RFC 9132 DOTS Signal Channel Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification How a network under DDoS attack asks a mitigation provider for help, using small CoAP messages over (D)TLS. RFC 9930 TEAP v1 Tunnel Extensible Authentication Protocol (TEAP) Version 1 A standards-track EAP method that builds a TLS tunnel, then runs password, certificate or other logins inside it. RFC 4563 MIKEY Key ID type The Key ID Information Type for the General Extension Payload in Multimedia Internet KEYing (MIKEY) A new MIKEY extension that labels which kind of key, and which specific key, a message is carrying. RFC 7268 RADIUS for IEEE 802 RADIUS Attributes for IEEE 802 Networks New RADIUS attributes that let Wi-Fi and wired 802 access points tell a central server more and get more back. RFC 7384 Security Requirements of Time Protocols in Packet Switched Networks What a security scheme for NTP and PTP must do, so that a forged or delayed clock cannot quietly corrupt network time. RFC 7454 BGP OPSEC BGP Operations and Security The operator's checklist for keeping BGP sessions, routes and routers from being abused. RFC 7677 SCRAM-SHA-256 SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms A short RFC that adds SHA-256 versions of the SCRAM password login and tightens the rules for using channel binding safely. RFC 8037 CFRG Curves in JOSE CFRG Elliptic Curve Diffie-Hellman (ECDH) and Signatures in JSON Object Signing and Encryption (JOSE) How JOSE carries the modern X25519, X448, Ed25519 and Ed448 algorithms: one new key type and one new signature name. RFC 9048 EAP-AKA' Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA') How a phone or device proves itself to a mobile network over EAP, with keys tied to the access network's name. RFC 1928 SOCKS5 SOCKS Protocol Version 5 A general framework that lets TCP and UDP applications pass through a firewall via a SOCKS server, with pluggable authentication. RFC 5084 AES-CCM/GCM in CMS Using AES-CCM and AES-GCM Authenticated Encryption in the Cryptographic Message Syntax (CMS) How to plug the AES-CCM and AES-GCM authenticated encryption modes into CMS authenticated-enveloped data. RFC 5656 ECC in SSH Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer How SSH adopted elliptic curve key exchange and signatures: ECDH, ECMQV and ECDSA. RFC 5914 Trust Anchor Format Trust Anchor Format A standard, compact record of a trust anchor: its public key plus limits on what it is trusted to vouch for. RFC 7250 Raw Public Keys in TLS Using Raw Public Keys in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) Let TLS and DTLS peers authenticate with a bare public key instead of a full certificate. RFC 5246 TLS 1.2 The Transport Layer Security (TLS) Protocol Version 1.2 The cryptographic protocol that secured the internet for a decade, providing privacy and data integrity between applications. RFC 2941 Telnet Authentication Telnet Authentication Option How a Telnet client and server agree on a way to prove identity, switch on encryption and pass credentials along. RFC 8265 PRECIS Credentials Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords The PRECIS rules for handling international usernames and passwords, replacing SASLprep. RFC 10004 CMC compliance Certificate Management over CMS (CMC): Compliance Requirements The checklist of what a certificate-enrollment client, RA or CA must, should or may support to be called a compliant CMC implementation. RFC 3647 PKI CP/CPS Framework Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework A checklist of topics for writing the rule book of a certification authority. RFC 5932 Camellia TLS Camellia Cipher Suites for TLS TLS cipher suites that use the Camellia block cipher, now with SHA-256 variants alongside the SHA-1 ones. RFC 3097 RSVP Cryptographic Authentication -- Updated Message Type Value Two RSVP Integrity message types get new numbers to end a clash with the Bundle message. RFC 3274 Compressed Data Content Type for Cryptographic Message Syntax (CMS) A standard envelope for compressing data before it is signed or encrypted in a CMS message. RFC 3947 IKE NAT-Traversal Negotiation of NAT-Traversal in the IKE How two IPsec peers discover a NAT between them and agree to wrap their traffic in UDP so it survives the trip. RFC 4868 HMAC-SHA-2 for IPsec Using HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 with IPsec How IPsec uses HMAC with SHA-256, SHA-384 and SHA-512 to prove packets are genuine and unchanged. RFC 5035 ESS CertID Agility Enhanced Security Services (ESS) Update: Adding CertID Algorithm Agility Lets S/MIME signatures name their certificate with any hash algorithm instead of being stuck with SHA-1. RFC 5295 EMSK Root Keys Specification for the Derivation of Root Keys from an Extended Master Session Key (EMSK) How the spare key from EAP is turned into separate root keys, one per purpose, without the purposes interfering. RFC 6562 VBR Audio with SRTP Guidelines for the Use of Variable Bit Rate Audio with Secure RTP Why packet sizes of variable bit rate speech can leak what is said over encrypted SRTP, and how to reduce the leak. RFC 7638 JWK Thumbprint JSON Web Key (JWK) Thumbprint A recipe for turning a JSON Web Key into a short, repeatable hash that names the key. RFC 8044 Data Types in RADIUS A shared, IANA-managed list of the data types that RADIUS attributes carry, written down after two decades of unwritten practice. RFC 8783 DOTS data channel Distributed Denial-of-Service Open Threat Signaling (DOTS) Data Channel Specification How a DDoS victim sends long-lived configuration, such as aliases and filtering rules, to its mitigation provider over RESTCONF. RFC 9849 TLS Encrypted Client Hello TLS Encrypted Client Hello How a browser hides which website it is asking for, even from the network that carries the bytes. RFC 9965 eap.arpa The eap.arpa. Domain and Extensible Authentication Protocol (EAP) Provisioning A reserved name that lets a device with no credentials ask a network for limited access, just to get provisioned. RFC 4822 RIPv2 Cryptographic Authentication How RIPv2 routers sign their messages with a keyed hash, now with the SHA family as well as MD5. RFC 7182 MANET ICV TLVs Integrity Check Value and Timestamp TLV Definitions for Mobile Ad Hoc Networks (MANETs) Standard TLVs for attaching integrity check values and timestamps to MANET packets, messages and addresses. RFC 9838 IKEv2 GKM Group Key Management Using the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 is stretched to hand keys and policy to a whole IPsec multicast group, and to change them later. RFC 2196 Site Security Handbook Site Security Handbook A practical guide for site administrators on writing security policy, protecting systems and responding to incidents. RFC 5753 Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) How to sign and encrypt CMS messages with elliptic curve algorithms: ECDSA signatures plus ECDH and ECMQV key agreement. RFC 5878 TLS Authorization Transport Layer Security (TLS) Authorization Extensions How a TLS client and server can swap authorization data, such as attribute certificates or SAML assertions, during the handshake. RFC 3610 AES-CCM Counter with CBC-MAC (CCM) A block cipher mode that encrypts a message and authenticates it, plus extra header data, with one key. RFC 4270 Attacks on Cryptographic Hashes in Internet Protocols Which Internet protocols are really hurt by collision attacks on MD5 and SHA-1, and what to do about it. RFC 5069 Emergency Call Security Security Threats and Requirements for Emergency Call Marking and Mapping The ways attackers could abuse emergency call marking and the mapping of a caller's location to a PSAP, and what the mapping protocol must do about them. RFC 7201 Securing RTP Options for Securing RTP Sessions A guide to the many ways to protect RTP media, from SRTP and its key exchanges to DTLS, IPsec and DRM. RFC 3826 AES for SNMP USM The Advanced Encryption Standard (AES) Cipher Algorithm in the SNMP User-based Security Model How SNMPv3 management messages get a stronger privacy option using AES in 128-bit cipher feedback mode. RFC 7636 PKCE Proof Key for Code Exchange by OAuth Public Clients A one-time secret that stops a stolen OAuth authorization code from being redeemed by an attacker. RFC 8826 WebRTC security threats Security Considerations for WebRTC What can go wrong when a web page is allowed to place calls from your browser, and what has to be true to keep it safe. RFC 9200 ACE-OAuth Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth) OAuth 2.0 reshaped for tiny devices: CoAP, CBOR and proof-of-possession tokens instead of bearer tokens over HTTPS. RFC 9640 YANG crypto types YANG Data Types and Groupings for Cryptography Reusable YANG building blocks for describing keys, passwords and certificates in device configuration. RFC 4082 TESLA Introduction Timed Efficient Stream Loss-Tolerant Authentication (TESLA): Multicast Source Authentication Transform Introduction How one sender can prove to millions of receivers that each packet is genuine, using symmetric keys that are revealed on a schedule. RFC 4523 LDAP X.509 schema Lightweight Directory Access Protocol (LDAP) Schema Definitions for X.509 Certificates How LDAP directories store and search X.509 certificates, revocation lists and related security data. RFC 4819 SSH Public Key Subsystem Secure Shell Public Key Subsystem A small SSH subsystem that lets a logged-in user add, remove and list their own public keys on a server. RFC 5959 Algorithms for Asymmetric Key Package Content Type Which cryptographic algorithms to use when protecting private keys and key packages with CMS. RFC 6033 Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type Which encryption, key management and signature algorithms to support when protecting cryptographic keys in CMS. RFC 6176 Prohibit SSL 2.0 Prohibiting Secure Sockets Layer (SSL) Version 2.0 Requires TLS clients and servers never to negotiate the insecure SSL version 2.0. RFC 6194 SHA-1 security Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms What the published attacks on SHA-0 and SHA-1 mean for protocol designers, and why collision resistance is the weak spot. RFC 6655 AES-CCM for TLS AES-CCM Cipher Suites for Transport Layer Security (TLS) Eight-plus-eight TLS cipher suites that use AES in CCM mode, built for small devices. RFC 6986 GOST R 34.11-2012 GOST R 34.11-2012: Hash Function The Russian federal standard hash function that replaced GOST R 34.11-94, with 256-bit and 512-bit outputs. RFC 7696 Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms How to design protocols so that aging cryptography can be swapped out, and how to pick the algorithms every implementation must support. RFC 9140 EAP-NOOB Nimble Out-of-Band Authentication for EAP (EAP-NOOB) How a gadget with no credentials joins a network: swap keys over the air, then confirm them with a one-way message a person carries. RFC 9580 OpenPGP OpenPGP The message, key and signature formats behind PGP-style encryption, now with modern curves and authenticated encryption. RFC 4178 SPNEGO The Simple and Protected Generic Security Service Application Program Interface (GSS-API) Negotiation Mechanism How two programs using GSS-API agree on a shared security mechanism, and notice if an attacker tampers with the choice. RFC 6696 ERP Extensions EAP Extensions for the EAP Re-authentication Protocol (ERP) A one-round-trip way to re-authenticate with EAP when moving between access points, without repeating the full login. RFC 1968 PPP ECP The PPP Encryption Control Protocol (ECP) How the two ends of a PPP link agree to encrypt their traffic, and which cipher to use. RFC 3686 AES-CTR ESP Using Advanced Encryption Standard (AES) Counter Mode With IPsec Encapsulating Security Payload (ESP) How to encrypt IPsec packets with AES in counter mode, and the traps that make it unsafe if misused. RFC 3788 SIGTRAN security Security Considerations for Signaling Transport (SIGTRAN) Protocols Which security the signaling-over-IP protocols must support: IPsec is mandatory, TLS is optional. RFC 4108 CMS Firmware Packages Using Cryptographic Message Syntax (CMS) to Protect Firmware Packages How to wrap a firmware update in signed, optionally encrypted CMS so a device only runs code from sources it trusts. RFC 4231 HMAC-SHA-2 test vectors Identifiers and Test Vectors for HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512 Official names and known-answer test cases for HMAC with SHA-224, SHA-256, SHA-384 and SHA-512. RFC 5374 IPsec Multicast Multicast Extensions to the Security Architecture for the Internet Protocol How IPsec protects packets sent to a whole group, where the destination is a multicast address. RFC 5830 GOST 28147-89 GOST 28147-89: Encryption, Decryption, and Message Authentication Code (MAC) Algorithms How the Russian GOST 28147-89 block cipher encrypts, decrypts and authenticates data, written down for Internet developers. RFC 5832 GOST R 34.10-2001 GOST R 34.10-2001: Digital Signature Algorithm The Russian federal digital signature standard, built on elliptic curves over a prime field. RFC 5931 EAP-pwd Extensible Authentication Protocol (EAP) Authentication Using Only a Password A way to log in to a network with just a password, even a guessable one, without handing an eavesdropper anything to crack offline. RFC 6031 Cryptographic Message Syntax (CMS) Symmetric Key Package Content Type A standard envelope for handing one or more plaintext symmetric keys, plus their metadata, from one party to another. RFC 6043 MIKEY-TICKET MIKEY-TICKET: Ticket-Based Modes of Key Distribution in Multimedia Internet KEYing (MIKEY) Adds Kerberos-style tickets to MIKEY so a central key management service can hand out media session keys. RFC 6677 EAP Channel Binding Channel-Binding Support for Extensible Authentication Protocol (EAP) Methods How an EAP peer and server catch an access point or visited network that lies about what it offers. RFC 6904 SRTP Header Ext. Enc. Encryption of Header Extensions in the Secure Real-time Transport Protocol (SRTP) A way to encrypt chosen RTP header extensions inside SRTP, using the same cipher as the media payload. RFC 9864 Fully-specified algs Fully-Specified Algorithms for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) Algorithm names for JOSE and COSE that state every choice, so negotiation by name alone actually works. RFC 9810 CMP Internet X.509 Public Key Infrastructure -- Certificate Management Protocol (CMP) The message protocol clients, registration authorities and certification authorities use to request, update, revoke and manage X.509 certificates. RFC 2412 OAKLEY The OAKLEY Key Determination Protocol A key exchange protocol built on Diffie-Hellman that lets two authenticated parties pick secret keys, with optional extras for privacy and forward secrecy. RFC 6979 Deterministic DSA Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA) How to sign with DSA or ECDSA without a random number generator, by deriving the per-signature value from the key and message. RFC 8439 ChaCha20-Poly1305 ChaCha20 and Poly1305 for IETF Protocols A fast software cipher and a one-time authenticator, defined stand-alone and combined into one AEAD for IETF protocols. RFC 1413 Ident Identification Protocol A tiny TCP service that tells you which user owns a given connection on a remote host. RFC 5410 MIKEY OMA BCAST Multimedia Internet KEYing (MIKEY) General Extension Payload for Open Mobile Alliance BCAST 1.0 A new MIKEY payload type that carries mobile broadcast key and parental control messages. RFC 7155 Diameter NAS Diameter Network Access Server Application How a network access server asks a Diameter server who may connect, what they may do, and what they used. RFC 2350 CSIRT Expectations Expectations for Computer Security Incident Response What the Internet community expects a security incident response team to tell its users, and a template for saying it. RFC 3013 ISP Security Recommended Internet Service Provider Security Services and Procedures What the IETF community hopes Internet service providers will do about security, from contact points to spoofing filters. RFC 3713 Camellia A Description of the Camellia Encryption Algorithm A public description of Camellia, a 128-bit block cipher with the same interface as AES. RFC 4357 GOST Extras Additional Cryptographic Algorithms for Use with GOST 28147-89, GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94 Algorithms The extra modes, key handling and parameter sets needed to use the Russian GOST algorithms on the Internet. RFC 6092 IPv6 CPE Security Recommended Simple Security Capabilities in Customer Premises Equipment (CPE) for Providing Residential IPv6 Internet Service Fifty recommendations for the basic packet filtering a home or small-office IPv6 router should do by default. RFC 8252 OAuth for Native Apps OAuth 2.0 for Native Apps Why native apps should send people to the real browser to sign in with OAuth, and how the result gets back to the app. RFC 9334 RATS Architecture Remote ATtestation procedureS (RATS) Architecture The shared vocabulary and data flows for letting one machine prove to another that it is in a trustworthy state. RFC 9700 OAuth 2.0 Security BCP Best Current Practice for OAuth 2.0 Security The rulebook of OAuth 2.0 security advice learned the hard way, including which risky shortcuts to stop using. RFC 2228 FTP Security FTP Security Extensions Optional FTP commands that add authentication, integrity and encryption to the control and data channels. RFC 2585 Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP How to publish and fetch X.509 certificates and revocation lists with plain FTP and HTTP. RFC 3566 AES-XCBC-MAC-96 The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec A message authentication code built from AES that stays secure for messages of any length, for use with IPsec ESP and AH. RFC 4030 DHCP Relay Auth The Authentication Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Option A keyed hash and replay counter that let a DHCP server and relay agent trust each other's relay-added data. RFC 4754 ECDSA for IKE IKE and IKEv2 Authentication Using the Elliptic Curve Digital Signature Algorithm (ECDSA) Adds elliptic curve signatures as a third way for IPsec peers to prove who they are during IKE and IKEv2. RFC 5055 SCVP Server-Based Certificate Validation Protocol (SCVP) Let a server build and check certificate paths for you, using a validation policy the server and client agree on. RFC 5934 TAMP Trust Anchor Management Protocol (TAMP) How a device's list of trusted signing keys is queried, updated and replaced safely, using signed CMS messages. RFC 6030 PSKC Portable Symmetric Key Container (PSKC) A standard XML envelope for moving secret keys, such as one-time-password seeds, between vendors' systems and devices. RFC 6113 Kerberos Pre-Auth A Generalized Framework for Kerberos Pre-Authentication A common model, a cookie for state and an encrypted tunnel (FAST) for building Kerberos pre-authentication. RFC 6797 HSTS HTTP Strict Transport Security (HSTS) How a website tells your browser to never talk to it without encryption again. RFC 7183 NHDP OLSRv2 integrity Integrity Protection for the Neighborhood Discovery Protocol (NHDP) and Optimized Link State Routing Protocol Version 2 (OLSRv2) A required tamper seal and freshness stamp for the control messages of wireless mesh routing protocols. RFC 7366 Encrypt-then-MAC Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) A TLS and DTLS extension that lets both sides switch to the safer order of encrypting first and adding the MAC afterwards. RFC 7427 IKEv2 signature auth Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) One IKEv2 authentication method that carries the signature algorithm with the signature, so new hashes and curves need no new codes. RFC 7619 IKEv2 NULL Auth The NULL Authentication Method in the Internet Key Exchange Protocol Version 2 (IKEv2) A way for an IKEv2 peer to skip authentication and identity, for anonymous or opportunistic encrypted sessions. RFC 7800 JWT Proof of Possession Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs) How a JSON Web Token can say "only the holder of this key may use me", and how a recipient checks it. RFC 7924 TLS Cached Info Transport Layer Security (TLS) Cached Information Extension A TLS extension that lets a client say it already has the server's certificate, so the server can send a short hash instead. RFC 7925 TLS/DTLS for IoT Transport Layer Security (TLS) / Datagram Transport Layer Security (DTLS) Profiles for the Internet of Things Which TLS and DTLS 1.2 options a small, resource-limited device should use to talk securely. RFC 8784 IKEv2 PSK mixing Mixing Preshared Keys in the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-quantum Security Mixing an extra preshared key into IKEv2 so VPN traffic resists future quantum computers. RFC 8915 NTS Network Time Security for the Network Time Protocol How clocks can check that the time they are told really comes from the server they asked, using TLS once and light symmetric crypto after that. RFC 9172 BPSec Bundle Protocol Security (BPSec) Integrity and confidentiality for bundles in delay-tolerant networks, applied block by block with pluggable security contexts. RFC 9483 Lightweight CMP Lightweight Certificate Management Protocol (CMP) Profile A trimmed-down profile of CMP that lets industrial and IoT devices get and renew certificates automatically. RFC 9629 KEM in CMS Using Key Encapsulation Mechanism (KEM) Algorithms in the Cryptographic Message Syntax (CMS) How CMS messages can be encrypted with key encapsulation mechanisms, including quantum-secure ones. RFC 9645 YANG TLS Groupings YANG Groupings for TLS Clients and TLS Servers Reusable YANG building blocks for configuring the TLS client and TLS server inside any management data model. RFC 5903 ECP groups for IKE Elliptic Curve Groups modulo a Prime (ECP Groups) for IKE and IKEv2 Three elliptic curve Diffie-Hellman groups for IKE and IKEv2, plus a corrected shared-secret format. RFC 2144 CAST-128 The CAST-128 Encryption Algorithm A freely-available encryption algorithm with a variable key size. RFC 4226 HOTP HOTP: An HMAC-Based One-Time Password Algorithm How a shared secret and a counter become a short code that works only once. RFC 4493 AES-CMAC The AES-CMAC Algorithm A message authentication code built from the AES block cipher with a single 128-bit key. RFC 4890 Recommendations for Filtering ICMPv6 Messages in Firewalls Which ICMPv6 messages a firewall must let through, which it can leave alone, and which it should block. RFC 7091 GOST R 34.10-2012 GOST R 34.10-2012: Digital Signature Algorithm The Russian standard recipe for signing a message with elliptic curves and a GOST hash. RFC 7202 Securing the RTP Framework: Why RTP Does Not Mandate a Single Media Security Solution Why RTP leaves media security to a menu of building blocks instead of mandating one solution. RFC 7721 IPv6 Address Privacy Security and Privacy Considerations for IPv6 Address Generation Mechanisms A comparison of how different ways of building an IPv6 address expose a device to tracking and scanning. RFC 7836 GOST Algorithms Guidelines on the Cryptographic Algorithms to Accompany the Usage of Standards GOST R 34.10-2012 and GOST R 34.11-2012 Russian cryptographic standards for protocols and key management RFC 8554 LMS Signatures Leighton-Micali Hash-Based Signatures Digital signatures built only from hash functions, designed to stay secure even if quantum computers are built. RFC 8612 DOTS Requirements DDoS Open Threat Signaling (DOTS) Requirements What a standard protocol for asking other networks for help during a DDoS attack must be able to do. RFC 9180 HPKE Hybrid Public Key Encryption A standard recipe for encrypting data of any size to someone's public key, built from a KEM, a KDF and an AEAD. RFC 2025 SPKM The Simple Public-Key GSS-API Mechanism (SPKM) A public-key mechanism for GSS-API: sign-in, key setup and message protection using certificates instead of shared secrets. RFC 3957 Authentication, Authorization, and Accounting (AAA) Registration Keys for Mobile IPv4 Letting a roaming Mobile IPv4 device derive fresh registration keys from the login credentials it already shares with its home AAA server. RFC 4309 AES-CCM for ESP Using Advanced Encryption Standard (AES) CCM Mode with IPsec Encapsulating Security Payload (ESP) How to use AES in CCM mode so one IPsec ESP pass both encrypts packets and checks that they were not tampered with. RFC 4543 GMAC in IPsec The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH How IPsec can prove who sent a packet, without encrypting it, by running AES-GCM with an empty message. RFC 4643 NNTP authentication Network News Transfer Protocol (NNTP) Extension for Authentication How a Usenet news client proves who it is: the AUTHINFO command, with a password option and a SASL option. RFC 4716 SSH public key format The Secure Shell (SSH) Public Key File Format A plain-text file format for sharing SSH public keys between different SSH programs, plus a standard fingerprint. RFC 5054 SRP for TLS Using the Secure Remote Password (SRP) Protocol for TLS Authentication How to log in to a TLS server with a username and password without ever revealing the password. RFC 5758 Internet X.509 Public Key Infrastructure: Additional Algorithms and Identifiers for DSA and ECDSA Names for signing certificates with DSA or ECDSA plus the SHA-2 family of hash functions. RFC 5831 GOST R 34.11-94 GOST R 34.11-94: Hash Function Algorithm The Russian federal standard hash function, which turns any bit sequence into a 256-bit value. RFC 5922 SIP domain certificates Domain Certificates in the Session Initiation Protocol (SIP) How a SIP server proves, with an X.509 certificate, that it speaks for a whole domain such as example.com. RFC 7210 Database of Long-Lived Symmetric Cryptographic Keys A conceptual table that holds the long-lived secret keys routing protocols use, so key management and protocols stay separate. RFC 7523 OAuth JWT Profile JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants How to use a signed JSON Web Token as an OAuth 2.0 login credential or as a way to get an access token. RFC 7861 RPCSEC_GSS v3 Remote Procedure Call (RPC) Security Version 3 Version 3 of the RPC security layer lets a client bind extra claims, such as a second identity, labels or privileges, to a session. RFC 8268 More MODP Groups for SSH More Modular Exponentiation (MODP) Diffie-Hellman (DH) Key Exchange (KEX) Groups for Secure Shell (SSH) Five new Diffie-Hellman key exchange methods for SSH, all with SHA-2 hashes, plus a fix to how peers' public keys are range-checked. RFC 8417 Security Event Token Security Event Token (SET) A signed JSON Web Token that reports a fact about a security subject, such as a revoked token or a logged-out session. RFC 8702 SHAKE in CMS Use of the SHAKE One-Way Hash Functions in the Cryptographic Message Syntax (CMS) How to use the SHAKE128 and SHAKE256 hash functions for digests, signatures and MACs in signed and authenticated CMS messages. RFC 8705 OAuth mutual TLS OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens Lets OAuth clients authenticate with TLS client certificates and ties access tokens to those certificates so stolen tokens are useless. RFC 8707 OAuth resource param Resource Indicators for OAuth 2.0 A resource parameter that lets an OAuth client say which API a requested token is meant for. RFC 8731 SSH Curve25519/448 Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448 Two elliptic curve key exchange methods for SSH, built on Curve25519 and Curve448. RFC 9266 TLS 1.3 Channel Binding Channel Bindings for TLS 1.3 A way to tie a login to the exact TLS 1.3 connection it runs over, using exported keying material. RFC 9303 LISP-SEC Locator/ID Separation Protocol Security (LISP-SEC) Adds one-time keys and HMACs to LISP map lookups so a forged or overclaimed mapping gets caught. RFC 9370 IKEv2 Multiple KE Multiple Key Exchanges in the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 can run several key exchanges in a row so the session key survives a quantum computer. RFC 9374 DRIP Entity Tag DRIP Entity Tag (DET) for Unmanned Aircraft System Remote ID (UAS RID) Self-asserting IPv6 addresses that give every drone a hard-to-fake ID and a pointer to its registry. RFC 9449 OAuth DPoP OAuth 2.0 Demonstrating Proof of Possession (DPoP) How an OAuth client proves, on every request, that it holds the private key a token was issued to, so stolen tokens are not enough. RFC 9848 ECH in DNS Bootstrapping TLS Encrypted ClientHello with DNS Service Bindings How a server publishes its Encrypted ClientHello settings in DNS so clients can find them before connecting. RFC 9853 DTLS return routability Return Routability Check for DTLS 1.2 and 1.3 How a DTLS endpoint proves a peer is really reachable at a new address before it starts sending there. RFC 9865 SCIM cursor pagination Cursor-Based Pagination of System of Cross-domain Identity Management (SCIM) Resources Bookmark-style paging for SCIM, so servers built on cursors need not translate to page numbers. RFC 9881 ML-DSA in X.509 Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) How to put NIST's quantum-resistant ML-DSA signatures and keys into X.509 certificates and CRLs. RFC 9887 TACACS+ over TLS Terminal Access Controller Access-Control System Plus (TACACS+) over TLS 1.3 Putting TACACS+ inside a TLS 1.3 connection so device-admin traffic is really encrypted. RFC 9967 SCIM SET profile System for Cross-Domain Identity Management (SCIM) Profile for Security Event Tokens (SETs) SCIM events carried in Security Event Tokens, so identity systems can push change notices and finish async requests. RFC 4669 RADIUS auth server MIB RADIUS Authentication Server MIB for IPv6 The SNMP counters a RADIUS authentication server keeps about itself and each client, redone so they work with IPv6 addresses. RFC 8062 Kerberos Anonymity Anonymity Support for Kerberos How a Kerberos client can prove who a server is without telling the server, or even the KDC, who the client is. RFC 8550 S/MIME 4.0 Certs Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 4.0 Certificate Handling The certificate rules an email program must follow before it trusts a key for S/MIME signing and encryption. RFC 8659 DNS CAA record DNS Certification Authority Authorization (CAA) Resource Record A DNS record that lets a domain holder say which certificate authorities may issue certificates for that name. RFC 9525 Service identity in TLS Service Identity in TLS How a TLS client checks that the certificate a server presents really names the service it meant to reach. RFC 3365 Strong security rule Strong Security Requirements for Internet Engineering Task Force Standard Protocols The IETF's rule that standard protocols must implement appropriate strong security, and the history behind it. RFC 4014 Remote Authentication Dial-In User Service (RADIUS) Attributes Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Information Option How a network access device hands RADIUS authorization attributes to a DHCP server through the relay agent. RFC 4432 SSH RSA key exchange RSA Key Exchange for the Secure Shell (SSH) Transport Layer Protocol A faster SSH key exchange that lets a slow client lock a random secret to the server's temporary RSA key. RFC 4681 TLS user mapping TLS User Mapping Extension A TLS extension that lets a client hint which directory account its certificate belongs to. RFC 4757 RC4-HMAC Kerberos The RC4-HMAC Kerberos Encryption Types Used by Microsoft Windows How Windows 2000 Kerberos used RC4 and HMAC-MD5 to encrypt tickets and messages. RFC 4942 IPv6 Transition/Co-existence Security Considerations A tour of the security issues that arise when IPv6 is added alongside IPv4, from the protocol, from transition tricks and from deployment. RFC 5209 NEA Network Endpoint Assessment (NEA): Overview and Requirements The problem statement, reference model and protocol requirements for checking the security posture of a device that wants on a network. RFC 5649 AES key wrap padding Advanced Encryption Standard (AES) Key Wrap with Padding Algorithm A padding convention that lets AES Key Wrap protect keys of any practical length, not just multiples of 64 bits. RFC 6039 Issues with Existing Cryptographic Protection Methods for Routing Protocols A survey of how hash-based authentication in OSPF, IS-IS, RIP, BGP and BFD is hard to manage and open to replay. RFC 6169 IP Tunnel Security Security Concerns with IP Tunneling Security threats and mitigations for IP traffic tunneled over UDP or TCP. RFC 7801 Kuznyechik GOST R 34.12-2015: Block Cipher "Kuznyechik" The Russian GOST block cipher with 128-bit blocks and 256-bit keys, written up for the Internet community. RFC 7905 ChaCha20-Poly1305 TLS ChaCha20-Poly1305 Cipher Suites for Transport Layer Security (TLS) Two fast, software-friendly primitives, ChaCha20 and Poly1305, become a new family of cipher suites for TLS and DTLS. RFC 8891 Magma GOST R 34.12-2015: Block Cipher "Magma" An English description of Magma, the 64-bit block cipher with a 256-bit key from a Russian national standard. RFC 9148 EST-coaps EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol How small, low-power devices get their certificates by running EST over secure CoAP instead of HTTPS. RFC 9416 Transient ID Security Security Considerations for Transient Numeric Identifiers Employed in Network Protocols Why protocol designers must think about how identifiers like sequence numbers and ports get chosen, not just that they are unique. RFC 9811 CMP over HTTP Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP) How to carry Certificate Management Protocol messages over plain HTTP POST requests, with a well-known URL prefix. RFC 4162 SEED in TLS Addition of SEED Cipher Suites to Transport Layer Security (TLS) Six new TLS cipher suites that use the SEED block cipher for bulk encryption. RFC 6460 Suite B TLS Suite B Profile for Transport Layer Security (TLS) How to use TLS 1.2 while staying inside the NSA's Suite B cryptography rules. RFC 2403 HMAC-MD5-96 The Use of HMAC-MD5-96 within ESP and AH How IPsec ESP and AH use HMAC with MD5, cut to 96 bits, to prove packets are genuine and unaltered. RFC 4535 GSAKMP GSAKMP: Group Secure Association Key Management Protocol How a secure group gets its policy, its members and its shared keys, and how it recovers when a member goes bad. RFC 5282 AEAD in IKEv2 Using Authenticated Encryption Algorithms with the Encrypted Payload of the Internet Key Exchange version 2 (IKEv2) Protocol How IKEv2 can protect its messages with one combined encrypt-and-authenticate algorithm such as AES GCM or AES CCM. RFC 5792 PA-TNC PA-TNC: A Posture Attribute (PA) Protocol Compatible with Trusted Network Connect (TNC) The message format an endpoint uses to report its security posture, such as antivirus, firewall and OS details, during a network health check. RFC 5793 PB-TNC PB-TNC: A Posture Broker (PB) Protocol Compatible with Trusted Network Connect (TNC) How a device and a network server swap health-check messages in batches before deciding whether the device may join. RFC 6032 CMS Encrypted Key Package Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type A CMS wrapper that lets encrypted key packages carry their own authorization check. RFC 6188 AES-192/256 in SRTP The Use of AES-192 and AES-256 in Secure RTP How to use the larger 192-bit and 256-bit AES keys to encrypt secure audio and video streams. RFC 6494 SEND certificate profile Certificate Profile and Certificate Management for SEcure Neighbor Discovery (SEND) How routers, proxies and address owners prove their right to speak in IPv6 Neighbor Discovery, using RPKI certificates. RFC 6980 ND and Fragmentation Security Implications of IPv6 Fragmentation with IPv6 Neighbor Discovery Why IPv6 Neighbor Discovery messages must not be fragmented. RFC 7203 IODEF Structured Info An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information A standard way to embed structured vulnerability, attack and remediation data inside IODEF incident reports. RFC 7383 IKEv2 fragmentation Internet Key Exchange Protocol Version 2 (IKEv2) Message Fragmentation How IKEv2 splits its own large messages into smaller encrypted pieces so they get past devices that drop IP fragments. RFC 7469 HTTP Public Key Pinning Public Key Pinning Extension for HTTP How a website tells browsers which public keys to expect in its certificate chain on future visits. RFC 7521 OAuth Assertions Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants A common frame for letting OAuth 2.0 clients prove who they are, or what they may do, with a signed statement from someone else. RFC 7652 PCP Authentication Port Control Protocol (PCP) Authentication Mechanism Lets a NAT or firewall check, using EAP, that a client is allowed to change its port mappings. RFC 7919 TLS FFDHE Groups Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS) Named finite-field Diffie-Hellman groups that let TLS clients and servers agree on safe key-exchange parameters. RFC 8213 DHCP Relay Security Security of Messages Exchanged between Servers and Relay Agents DHCP relay agents and servers must be able to talk over encrypted IPsec, and operators are urged to turn it on. RFC 8332 SSH RSA SHA-2 Use of RSA Keys with SHA-256 and SHA-512 in the Secure Shell (SSH) Protocol How SSH keeps your existing RSA keys while moving signatures from SHA-1 to SHA-256 and SHA-512. RFC 9060 STIR Cert Delegation Secure Telephone Identity Revisited (STIR) Certificate Delegation How a holder of phone-number authority can hand a slice of it to another party through a delegate certificate. RFC 9142 Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH) Which SSH key exchange methods to require, encourage, discourage or ban, now that SHA-1 and small keys are no longer strong enough. RFC 9242 IKEv2 Intermediate Exch Intermediate Exchange in the Internet Key Exchange Protocol Version 2 (IKEv2) A new IKEv2 exchange that lets peers move large amounts of data, such as post-quantum public keys, before authentication. RFC 9258 Importing PSKs Importing External Pre-Shared Keys (PSKs) for TLS 1.3 How to turn a pre-shared key provisioned outside TLS into separate, safely bound keys for TLS 1.3. RFC 9711 Entity Attestation Token The Entity Attestation Token (EAT) A signed bundle of claims in which a device tells a server what it is, what software it runs, and what state it is in. RFC 1704 Internet authentication On Internet Authentication A 1994 tour of authentication technologies, from plain passwords to public keys, and which ones suit which Internet protocols. RFC 2627 Multicast Key Management Key Management for Multicast: Issues and Architectures Managing encryption keys when many people join and leave a secure group. RFC 2977 Mobile IP Authentication, Authorization, and Accounting Requirements Requirements for AAA infrastructure to support mobile nodes roaming between networks. RFC 2985 PKCS #9 PKCS #9: Selected Object Classes and Attribute Types Version 2.0 A catalog of directory object classes and attribute types for PKCS-based public-key systems, republished by the IETF. RFC 3562 Key Management Considerations for the TCP MD5 Signature Option How long, how private and how fresh the secret keys behind BGP's TCP MD5 signatures should be. RFC 3715 IPsec-Network Address Translation (NAT) Compatibility Requirements Why NAT breaks IPsec in so many ways, and what a fix has to achieve. RFC 3740 Multicast Security The Multicast Group Security Architecture A framework for securing data sent to large multicast groups: who holds keys, who sets policy, and which security associations tie it together. RFC 3837 OPES Security Threats Security Threats and Risks for Open Pluggable Edge Services (OPES) A catalogue of what can go wrong when third-party services rewrite web traffic at the edge of the network. RFC 3964 Security Considerations for 6to4 A threat analysis of 6to4 tunneling, and the checks routers and relays need to stay out of trouble. RFC 4017 EAP WLAN Reqs Extensible Authentication Protocol (EAP) Method Requirements for Wireless LANs The checklist an EAP method must pass before it is fit for IEEE 802.11 wireless LANs. RFC 4046 MSEC Key Management Multicast Security (MSEC) Group Key Management Architecture The common blueprint for how a group of receivers gets, and keeps getting, the shared keys that protect multicast traffic. RFC 5927 ICMP Attacks against TCP How forged ICMP error messages can reset, slow or cripple a TCP connection, and the checks that stop them. RFC 6943 Issues in Identifier Comparison for Security Purposes When systems compare names in different ways, attackers can slip through the gap. RFC 7457 TLS Known Attacks Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS) A snapshot of the serious attacks on TLS and DTLS that motivated the recommendations for using them safely. RFC 7624 Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement The IAB's catalogue of how an attacker with a view of much of the Internet can spy on traffic without being noticed. RFC 8603 CNSA Certificate Profile Commercial National Security Algorithm (CNSA) Suite Certificate and Certificate Revocation List (CRL) Profile Cryptographic requirements for digital certificates in US government systems. RFC 9162 Certificate Transparency Certificate Transparency Version 2.0 Public, append-only logs of TLS certificates, so misissued certificates can be spotted by anyone who looks. RFC 9794 PQ/T hybrid terminology Terminology for Post-Quantum Traditional Hybrid Schemes A shared dictionary for talking about schemes that combine post-quantum and traditional cryptography. RFC 4346 TLS 1.1 The Transport Layer Security (TLS) Protocol Version 1.1 TLS 1.1 patched CBC weaknesses in TLS 1.0 and kept the same handshake and record design. RFC 6347 DTLS 1.2 Datagram Transport Layer Security Version 1.2 TLS 1.2 adapted to survive lost, reordered and duplicated datagrams, such as those carried over UDP. RFC 2419 PPP DESE The PPP DES Encryption Protocol, Version 2 (DESE-bis) How to encrypt PPP packets with DES in chaining mode, with a nonce, sequence numbers and recovery from lost packets. RFC 3739 Qualified Certs Internet X.509 Public Key Infrastructure: Qualified Certificates Profile A profile for X.509 identity certificates issued to real people, written to work under any country's legal rules. RFC 4668 RADIUS auth client MIB RADIUS Authentication Client MIB for IPv6 The SNMP counters a RADIUS client keeps about each authentication server, redone so they work with IPv6 addresses. RFC 6257 Bundle Security Protocol Bundle Security Protocol Specification Four security blocks that protect bundles hop by hop or end to end in delay-tolerant networks. RFC 6955 DH Proof-of-Possession Diffie-Hellman Proof-of-Possession Algorithms How to prove you hold a Diffie-Hellman private key when the key cannot sign. RFC 8002 HIP Certificates Host Identity Protocol Certificates A standard envelope for carrying digital certificates inside Host Identity Protocol control packets. RFC 9919 Lightweight OCSP profile The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments How to slim down and cache OCSP certificate-status checks so they scale to millions of users. RFC 9973 TLS cert + ext PSK TLS 1.3 Extension for Using Certificates with an External Pre-Shared Key A TLS 1.3 extension that mixes an external pre-shared key into the handshake while keeping certificate authentication. RFC 2246 TLS 1.0 The TLS Protocol Version 1.0 The first IETF standard for Transport Layer Security: private, tamper-evident connections between two applications. RFC 1760 S/KEY The S/KEY One-Time Password System Log in with a password that works only once, built from repeated hashing of a secret pass-phrase. RFC 1984 IAB Crypto Statement IAB and IESG Statement on Cryptographic Technology and the Internet The IAB and IESG argue against export controls, weak keys and key escrow for cryptography. RFC 2202 HMAC Test Cases Test Cases for HMAC-MD5 and HMAC-SHA-1 Answer key to verify implementations of HMAC-MD5 and HMAC-SHA-1. RFC 2802 IOTP signatures Digital Signatures for the v1.0 Internet Open Trading Protocol (IOTP) Digital signatures for secure online commerce messages in IOTP. RFC 4081 NSIS Threats Security Threats for Next Steps in Signaling (NSIS) A catalogue of the ways attackers could abuse the Next Steps in Signaling (NSIS) protocols, written before the protocols were finished. RFC 4137 EAP state machines State Machines for Extensible Authentication Protocol (EAP) Peer and Authenticator How peers and servers orchestrate authentication exchanges. RFC 4285 MIPv6 auth option Authentication Protocol for Mobile IPv6 A lightweight, shared-key way to authenticate Mobile IPv6 signaling for networks that cannot use IPsec between phone and home agent. RFC 5114 Additional DH Groups Additional Diffie-Hellman Groups for Use with IETF Standards Eight NIST-defined Diffie-Hellman groups, with test data and notes for using them in IKE, TLS, SSH and S/MIME. RFC 5997 Use of Status-Server Packets in the Remote Authentication Dial In User Service (RADIUS) Protocol A RADIUS packet that asks a server whether it is alive without pretending to be a user login. RFC 6268 CMS/PKIX ASN.1 modules Additional New ASN.1 Modules for the Cryptographic Message Syntax (CMS) and the Public Key Infrastructure Using X.509 (PKIX) Nine CMS and PKIX data-format modules rewritten in the 2008 ASN.1 notation, with no change on the wire. RFC 7824 Privacy Considerations for DHCPv6 A catalogue of the DHCPv6 fields and options that can reveal who a device is, what it is and where it has been. RFC 8391 XMSS XMSS: eXtended Merkle Signature Scheme A digital signature built only from hash functions, using a tree of one-time keys to sign many messages. RFC 8811 DOTS architecture DDoS Open Threat Signaling (DOTS) Architecture The big-picture design for letting a DDoS victim ask upstream networks for help, without specifying the protocols themselves. RFC 8862 SIPBRANDY Best Practices for Securing RTP Media Signaled with SIP How to set up encrypted SIP calls whose keys are tied to the caller's signed identity. RFC 9380 Hash to Curve Hashing to Elliptic Curves Algorithms for encoding arbitrary strings to points on elliptic curves. RFC 4671 RADIUS acct server MIB RADIUS Accounting Server MIB for IPv6 A management database for watching how a RADIUS accounting server handles requests from its clients, now able to hold IPv6 addresses. RFC 1108 DoD IP Security Options U.S. Department of Defense Security Options for the Internet Protocol Two IP header options that stamp each packet with a U.S. security classification and who protects it. RFC 2405 ESP DES-CBC The ESP DES-CBC Cipher Algorithm With Explicit IV How IPsec ESP can encrypt packets with DES in CBC mode, carrying a fresh random IV in every packet. RFC 2410 NULL Encryption The NULL Encryption Algorithm and Its Use With IPsec A cipher that does nothing on purpose, so IPsec ESP can authenticate packets without hiding them. RFC 2451 ESP CBC Ciphers The ESP CBC-Mode Cipher Algorithms One common recipe for using block ciphers such as Blowfish, CAST-128, IDEA, RC5 and 3DES with IPsec ESP. RFC 2847 LIPKEY LIPKEY - A Low Infrastructure Public Key Mechanism Using SPKM A thin GSS-API layer that lets a client log in with a password over a channel secured by the server's certificate, like a typical TLS setup. RFC 3554 SCTP with IPsec On the Use of Stream Control Transmission Protocol (SCTP) with IPsec What IPsec and IKE must do so that SCTP associations with several addresses can be protected. RFC 3560 RSAES-OAEP in CMS Use of the RSAES-OAEP Key Transport Algorithm in Cryptographic Message Syntax (CMS) How to lock the one-time content key of a CMS message with RSA using OAEP padding, which closes the Million Message Attack hole. RFC 3853 AES for SIP S/MIME S/MIME Advanced Encryption Standard (AES) Requirement for the Session Initiation Protocol (SIP) SIP's mandatory S/MIME encryption algorithm changes from 3DES to AES. RFC 3871 ISP Infra Security Operational Security Requirements for Large Internet Service Provider (ISP) IP Network Infrastructure A checklist operators can hand to vendors listing the security features ISP routers and switches must have. RFC 3893 SIP AIB Session Initiation Protocol (SIP) Authenticated Identity Body (AIB) Format A small signed slice of a SIP request that lets the receiver check who really sent it. RFC 4073 CMS Multiple Contents Protecting Multiple Contents with the Cryptographic Message Syntax (CMS) Two CMS content types for bundling several contents together, optionally with attributes, under one layer of protection. RFC 4383 TESLA in SRTP The Use of Timed Efficient Stream Loss-Tolerant Authentication (TESLA) in the Secure Real-time Transport Protocol (SRTP) How to prove who sent each packet of a multicast media stream, using delayed key disclosure inside SRTP. RFC 4491 GOST in X.509 Using the GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94 Algorithms with the Internet X.509 Public Key Infrastructure Certificate and CRL Profile How to write GOST signatures, hashes and public keys into X.509 certificates and CRLs. RFC 4581 CGA extensions Cryptographically Generated Addresses (CGA) Extension Field Format A Type-Length-Value layout for the extension fields of Cryptographically Generated Addresses. RFC 4982 CGA Hash Agility Support for Multiple Hash Algorithms in Cryptographically Generated Addresses (CGAs) Why SHA-1 attacks do not break CGAs, and how the Sec bits can signal other hash algorithms later. RFC 4985 SRVName SAN Internet X.509 Public Key Infrastructure Subject Alternative Name for Expression of Service Name A certificate name that says which service at a domain a server is allowed to provide. RFC 5386 BTNS Better-Than-Nothing Security: An Unauthenticated Mode of IPsec How to set up IPsec without checking who the other side is, so traffic is at least protected from eavesdroppers. RFC 5422 EAP-FAST Provisioning Dynamic Provisioning Using Flexible Authentication via Secure Tunneling Extensible Authentication Protocol (EAP-FAST) How EAP-FAST uses its TLS tunnel to hand a device the credentials it needs, with or without proving the server first. RFC 5485 I-D digital signatures Digital Signatures on Internet-Draft Documents How the IETF Secretariat signs each Internet-Draft with a detached CMS signature in a companion file. RFC 5544 Timestamp binding Syntax for Binding Documents with Time-Stamps A CMS-based envelope that keeps a file and its time-stamp tokens together in one object. RFC 5685 IKEv2 Redirect Redirect Mechanism for the Internet Key Exchange Protocol Version 2 (IKEv2) How an overloaded or retiring VPN gateway can tell an IKEv2 client to connect to a different gateway. RFC 5749 Distribution of EAP-Based Keys for Handover and Re-Authentication How an EAP server hands derived root keys to other servers so a device can re-authenticate quickly after a handover. RFC 5896 GSS-API OK-AS-DELEGATE Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy A GSS-API flag that delegates a user's credentials only when central policy says the service can be trusted with them. RFC 5991 Teredo Teredo Security Updates Randomizing bits in Teredo addresses and retiring the cone bit so attackers have a harder time scanning. RFC 6187 SSH X.509 X.509v3 Certificates for Secure Shell Authentication How SSH servers and users can prove who they are with X.509 certificate chains instead of bare keys. RFC 6211 CMS algorithm protection Cryptographic Message Syntax (CMS) Algorithm Identifier Protection Attribute A signed copy of the algorithm names, so an attacker cannot quietly swap in a weaker hash or signature algorithm. RFC 6345 PANA Relay Protocol for Carrying Authentication for Network Access (PANA) Relay Element A relay node that lets PANA clients and authentication agents talk when normal IP routing cannot connect them. RFC 6989 Additional Diffie-Hellman Tests for the Internet Key Exchange Protocol Version 2 (IKEv2) Extra sanity checks IKEv2 peers must run on a received Diffie-Hellman public value, so reused keys cannot be attacked. RFC 7009 OAuth Token Revocation OAuth 2.0 Token Revocation A standard way for an OAuth client to tell the server that a token is no longer needed. RFC 7055 GSS-EAP A GSS-API Mechanism for the Extensible Authentication Protocol How applications that speak GSS-API or SASL can sign users in through EAP and a backend AAA server. RFC 8019 IKEv2 DDoS Protection Protecting Internet Key Exchange Protocol Version 2 (IKEv2) Implementations from Distributed Denial-of-Service Attacks Defenses and a proof-of-work puzzle that help IKEv2 servers survive floods of fake connection attempts. RFC 8080 EdDSA for DNSSEC Edwards-Curve Digital Security Algorithm (EdDSA) for DNSSEC How DNSSEC zones can sign their records with the Ed25519 and Ed448 EdDSA algorithms. RFC 8110 OWE Opportunistic Wireless Encryption Encrypting open Wi-Fi with a Diffie-Hellman exchange, so nobody needs a password. RFC 8628 OAuth Device Grant OAuth 2.0 Device Authorization Grant How a TV or printer with no good keyboard gets your permission by showing a short code you approve on your phone. RFC 8692 SHAKE in X.509 Internet X.509 Public Key Infrastructure: Additional Algorithm Identifiers for RSASSA-PSS and ECDSA Using SHAKEs Algorithm identifiers that let X.509 certificates and CRLs use the SHAKE hash functions with RSASSA-PSS and ECDSA signatures. RFC 8737 ACME TLS-ALPN challenge Automated Certificate Management Environment (ACME) TLS Application-Layer Protocol Negotiation (ALPN) Challenge Extension A way for a certificate authority to check domain ownership using nothing but a special TLS handshake on port 443. RFC 8739 ACME STAR certificates Support for Short-Term, Automatically Renewed (STAR) Certificates in the Automated Certificate Management Environment (ACME) An ACME extension where the CA keeps reissuing short-lived certificates, so a compromised key is handled by stopping renewal instead of revoking. RFC 8871 PERC A Solution Framework for Private Media in Privacy-Enhanced RTP Conferencing (PERC) How a group video call can keep its media secret from the very servers that forward it. RFC 9045 CRMF Algorithm Update Algorithm Requirements Update to the Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF) Swaps the aging SHA-1, DES and Triple-DES defaults in password-protected certificate requests for SHA-256, HMAC-SHA256 and AES-GMAC. RFC 9101 OAuth JAR The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR) Put an OAuth 2.0 authorization request inside a signed (and optionally encrypted) JWT instead of plain URL parameters. RFC 9145 Secure NSH Integrity Protection for the Network Service Header (NSH) and Encryption of Sensitive Context Headers How to seal the Network Service Header against tampering and hide sensitive metadata inside it. RFC 9203 ACE OSCORE Profile The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework How a small device proves it holds an OAuth access token's key and sets up OSCORE-protected CoAP with a server. RFC 9347 IP-TFS Aggregation and Fragmentation Mode for Encapsulating Security Payload (ESP) and Its Use for IP Traffic Flow Security (IP-TFS) A fixed-size, constant-rate ESP tunnel that packs and splits IP packets so observers cannot read traffic patterns. RFC 9393 CoSWID Concise Software Identification Tags A compact binary form of software identification tags, built for devices with little network and storage capacity. RFC 9420 MLS The Messaging Layer Security (MLS) Protocol How a group chat, from two people to thousands, agrees on encryption keys even when members are not online together. RFC 9481 CMP algorithms Certificate Management Protocol (CMP) Algorithms A current shopping list of cryptographic algorithms for CMP, replacing the aging list in RFC 4210. RFC 9482 CMP over CoAP Constrained Application Protocol (CoAP) Transfer for the Certificate Management Protocol How small IoT devices can talk to a certificate authority using CoAP instead of HTTP. RFC 9851 TLS 1.2 feature freeze TLS 1.2 is in Feature Freeze No more changes to TLS 1.2 beyond urgent security fixes, so new work, including post-quantum, goes to TLS 1.3. RFC 9916 PCEPS TLS version rules Updates to the Usage of TLS to Provide a Secure Transport for the Path Computation Element Communication Protocol (PCEP) Two extra TLS rules for secure PCEP: prefer the newest TLS version, and never use TLS 1.3 early data. RFC 9918 NETCONF over TLS update Updates to Using the NETCONF Protocol over Transport Layer Security (TLS) with Mutual X.509 Authentication Updated TLS rules for NETCONF: TLS 1.2 stays mandatory, TLS 1.3 is added, and early data is banned. RFC 9935 ML-KEM in X.509 Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) How to put quantum-resistant ML-KEM keys into X.509 certificates and private key files. RFC 9936 ML-KEM in CMS Use of ML-KEM in the Cryptographic Message Syntax (CMS) How to use ML-KEM to protect encrypted email and other CMS messages against quantum computers. RFC 9942 COSE Receipts CBOR Object Signing and Encryption (COSE) Receipts A compact, signed proof that an entry is in a transparency log, or that the log only ever grew. RFC 9966 Bootstrapped TLS Bootstrapped TLS Authentication with Proof of Knowledge How a brand-new device and a TLS server prove to each other that they know the device's key, before any credential exists. RFC 9399 X.509 Logotypes Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates How a certificate can carry a logo of its issuer, its owner or a community, purely to help people recognize it. RFC 6367 Camellia TLS Addition of the Camellia Cipher Suites to Transport Layer Security (TLS) New TLS cipher suites that bring the Camellia block cipher to CBC, GCM and pre-shared-key modes. RFC 3280 X.509 PKI profile Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile The Internet profile of X.509 v3 certificates and v2 revocation lists, plus how to validate a certification path. RFC 2094 GKMP Architecture Group Key Management Protocol (GKMP) Architecture How a multicast group can make and share its own symmetric key without a central key distribution site. RFC 2522 Photuris Photuris: Session-Key Management Protocol A Diffie-Hellman based protocol for setting up short-lived IPsec session keys, with cookies to blunt flooding. RFC 4334 Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN) Certificate markers that tell a Wi-Fi or dial-up client which of its certificates fits which network. RFC 4434 AES-XCBC-PRF-128 The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE) A 128-bit pseudo-random function built from AES-XCBC-MAC by skipping its truncation step, for use in IKE. RFC 4505 SASL ANONYMOUS Anonymous Simple Authentication and Security Layer (SASL) Mechanism A SASL login method that lets a client in without saying who it is, replacing the old 'anonymous' plain-text password trick. RFC 4752 Kerberos SASL The Kerberos V5 ("GSSAPI") Simple Authentication and Security Layer (SASL) Mechanism How a client and server use Kerberos V5 through GSS-API to authenticate inside the SASL framework. RFC 9549 Internationalization Updates to RFC 5280 How X.509 certificates carry internationalized domain names and email addresses, with every name stored in its ASCII form. RFC 9654 OCSP Nonce Extension Online Certificate Status Protocol (OCSP) Nonce Extension Lets the OCSP Nonce be up to 128 octets long, while telling clients to use at least 32. RFC 9708 HSS/LMS in CMS Use of the HSS/LMS Hash-Based Signature Algorithm in the Cryptographic Message Syntax (CMS) How to sign CMS messages with hash-based HSS/LMS signatures that are considered safe against quantum computers. RFC 9765 RADIUS/1.1 RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5 A way for RADIUS over TLS to negotiate a variant that drops MD5 and the shared secret entirely. RFC 2577 FTP Security Considerations A short checklist of ways FTP servers can be abused, and how server authors and administrators can blunt each one. RFC 2904 AAA Authorization Framework Framework for authorizing users to access Internet resources and services RFC 2979 Behavior of and Requirements for Internet Firewalls Defining how firewalls should behave transparently on networks. RFC 3128 Protection Against a Variant of the Tiny Fragment Attack (RFC 1858) How a combination of tiny and overlapping fragments can get past RFC 1858 firewall filters, and how to stop it. RFC 3218 Preventing the Million Message Attack on Cryptographic Message Syntax How to stop an attacker from using a mail list server as an oracle to decrypt RSA-protected keys. RFC 4058 PANA Requirements Protocol for Carrying Authentication for Network Access (PANA) Requirements What a single, link-independent protocol for logging a device into a network would have to do. RFC 4225 MIPv6 RO security Mobile IP Version 6 Route Optimization Security Design Background Why Mobile IPv6 checks that a mobile node is really reachable at both its addresses before a peer will send it traffic directly. RFC 5297 AES-SIV Synthetic Initialization Vector (SIV) Authenticated Encryption Using the Advanced Encryption Standard (AES) A block cipher mode offering both deterministic encryption and nonce-misuse resistance RFC 5489 ECDHE_PSK for TLS ECDHE_PSK Cipher Suites for Transport Layer Security (TLS) TLS cipher suites that use a pre-shared key to authenticate a fresh elliptic curve key exchange, giving forward secrecy. RFC 5639 Brainpool curves Elliptic Curve Cryptography (ECC) Brainpool Standard Curves and Curve Generation Seven sets of elliptic curve parameters for use in cryptography, generated to be immune to known attacks. RFC 6189 ZRTP ZRTP: Media Path Key Agreement for Unicast Secure RTP Two endpoints agree on a secret key for encrypting a call inside the media stream itself, with no certificates and no help from call signaling. RFC 6421 Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS) What any plan to let RADIUS swap out its aging cryptography has to deliver. RFC 6467 IKEv2 secure password Secure Password Framework for Internet Key Exchange Version 2 (IKEv2) A common framework for symmetric password authentication in IKEv2. RFC 7914 scrypt The scrypt Password-Based Key Derivation Function A password-based key derivation function that needs lots of memory, making large-scale guessing on custom hardware expensive. RFC 7918 TLS False Start Transport Layer Security (TLS) False Start Let a TLS client send application data one round trip sooner, but only when strict safety conditions hold. RFC 8701 GREASE Applying Generate Random Extensions And Sustain Extensibility (GREASE) to TLS Extensibility Reserved TLS values that clients sprinkle into handshakes at random, so broken servers get caught before the protocol rusts shut. RFC 9055 DetNet Security Deterministic Networking (DetNet) Security Considerations Protecting networks that guarantee delivery speed and reliability. RFC 9954 Hybrid key exchange TLS Hybrid Key Exchange in TLS 1.3 Glue two key exchanges together in TLS 1.3 by concatenating their keys and secrets, so the session holds if either one holds. RFC 2401 IPsec Architecture Security Architecture for the Internet Protocol The 1998 master plan for IPsec: security associations, policy databases and how packets are protected at the IP layer. RFC 5759 Suite B Profile Suite B Certificate and Certificate Revocation List (CRL) Profile Certificate and CRL profiles for using NSA's Suite B cryptography with elliptic curve algorithms. RFC 4306 IKEv2 Internet Key Exchange (IKEv2) Protocol Version 2 of the IPsec key exchange: four messages to authenticate both sides and set up encrypted tunnels. RFC 3852 CMS Cryptographic Message Syntax (CMS) A general envelope format for signing, hashing, authenticating or encrypting any message content. RFC 4269 SEED The SEED Encryption Algorithm The 128-bit Korean national block cipher, specified with its round function, key schedule, S-boxes and test vectors. RFC 4670 RADIUS acct client MIB RADIUS Accounting Client MIB for IPv6 A management database for watching how a RADIUS accounting client talks to its servers, now able to hold IPv6 addresses. RFC 6149 MD2 Historic MD2 to Historic Status Why the MD2 hash algorithm was retired and RFC 1319 moved to Historic status. RFC 7707 IPv6 Reconnaissance Network Reconnaissance in IPv6 Networks Why scanning an IPv6 subnet is harder than scanning IPv4, but far from impossible. RFC 9879 PBMAC1 in PKCS #12 Use of Password-Based Message Authentication Code 1 (PBMAC1) in PKCS #12 Syntax How PKCS #12 files can protect their integrity with PBMAC1 and modern password-based key derivation. RFC 7525 TLS Best Practices Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS) The 2015 best-current-practice checklist for configuring TLS 1.2 and DTLS safely, since replaced by RFC 9325. RFC 5996 IKEv2 Internet Key Exchange Protocol Version 2 (IKEv2) How two IPsec peers prove who they are, agree on algorithms and keys, and keep those keys fresh. RFC 1828 Keyed MD5 for AH IP Authentication using Keyed MD5 Using MD5 to authenticate IP packets without encryption RFC 1829 ESP DES-CBC The ESP DES-CBC Transform How ESP scrambles IP payloads with DES in cipher block chaining mode, and why even the authors doubted it was strong enough. RFC 2623 NFS Security Issues NFS Version 2 and Version 3 Security Issues and the NFS Protocol's Use of RPCSEC_GSS and Kerberos V5 What is weak about NFS version 2 and 3 security, and how NFS uses RPCSEC_GSS and Kerberos V5 to fix it. RFC 2712 Kerberos in TLS Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) Lets a TLS connection authenticate with Kerberos tickets instead of public-key certificates. RFC 2946 Telnet Encryption Telnet Data Encryption Option A generic Telnet option that lets either side scramble its half of the conversation, leaving the choice of cipher to companion documents. RFC 3062 LDAP Password Modify LDAP Password Modify Extended Operation An LDAP extended operation for changing a user's password, whatever the identity form or storage. RFC 3537 HMAC Key Wrap Wrapping a Hashed Message Authentication Code (HMAC) key with a Triple-Data Encryption Standard (DES) Key or an Advanced Encryption Standard (AES) Key How to lock an HMAC key of any length inside a Triple-DES or AES key so it can be stored or sent safely. RFC 3585 IPsec Policy Model IPsec Configuration Policy Information Model A shared object-oriented blueprint for describing IPsec rules, so storage formats and tools can all mean the same thing. RFC 3820 Proxy Certificates Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile How a user can sign a short-lived, restricted certificate for a helper program, with no CA involved and no private key shared. RFC 4043 Permanent Identifier Internet X.509 Public Key Infrastructure Permanent Identifier A certificate name form that stays the same even when a person's name, job or location changes. RFC 4056 RSASSA-PSS in CMS Use of the RSASSA-PSS Signature Algorithm in Cryptographic Message Syntax (CMS) How to sign CMS messages with the RSASSA-PSS signature scheme, and which parameters must match. RFC 4109 IKEv1 Algorithms Algorithms for Internet Key Exchange version 1 (IKEv1) Replaces the old must-support algorithm list for IKEv1 with one that drops weak choices and adds AES. RFC 4308 IPsec crypto suites Cryptographic Suites for IPsec Two named, ready-made bundles of IPsec algorithms so administrators do not have to pick each one. RFC 4359 RSA in ESP and AH The Use of RSA/SHA-1 Signatures within Encapsulating Security Payload (ESP) and Authentication Header (AH) Digital signatures for IPsec packets, so group members can tell who really sent a packet. RFC 4401 GSS-API PRF A Pseudo-Random Function (PRF) API Extension for the Generic Security Service Application Program Interface (GSS-API) A GSS-API function that turns an established security context into fresh keying material for other protocols. RFC 4650 MIKEY DH with HMAC HMAC-Authenticated Diffie-Hellman for Multimedia Internet KEYing (MIKEY) Setting up fresh media keys in one round trip using Diffie-Hellman, with a pre-shared secret proving who is who. RFC 4738 MIKEY-RSA-R MIKEY-RSA-R: An Additional Mode of Key Distribution in Multimedia Internet KEYing (MIKEY) A MIKEY mode where the responder picks the traffic key and proves who it is, for calls that get forwarded and for group key download. RFC 4771 Integrity Transform Carrying Roll-Over Counter for the Secure Real-time Transport Protocol (SRTP) A way to carry the SRTP roll-over counter inside packets so late joiners can get in sync. RFC 5021 Kerberos TCP Extensions Extended Kerberos Version 5 Key Distribution Center (KDC) Exchanges over TCP A way for Kerberos clients and servers to negotiate extensions over TCP using a spare bit in the length field. RFC 5027 SDP Security Precond. Security Preconditions for Session Description Protocol (SDP) Media Streams A way to hold off ringing the phone until both sides know how to decrypt each other's media. RFC 5178 GSS-API domain names Generic Security Service Application Program Interface (GSS-API) Internationalization and Domain-Based Service Names and Name Type A GSS-API name type that names a service by the domain it serves, plus Unicode-aware name functions. RFC 5192 DHCP Options for Protocol for Carrying Authentication for Network Access (PANA) Authentication Agents Two DHCP options that hand a network client the addresses of its PANA authentication agents. RFC 5276 SCVP Evidence Records Using the Server-Based Certificate Validation Protocol (SCVP) to Convey Long-Term Evidence Records How a certificate validation server can hand back long-term proof records for the certificates and revocation data it used. RFC 5587 GSS-API mech inquiry Extended Generic Security Service Mechanism Inquiry APIs New GSS-API calls that let applications pick a security mechanism by what it can do instead of hardcoding its identifier. RFC 5607 RADIUS NAS management Remote Authentication Dial-In User Service (RADIUS) Authorization for Network Access Server (NAS) Management New RADIUS attributes that say who may manage a network device, over which protocol, how securely, and with what privileges. RFC 5669 SEED in SRTP The SEED Cipher Algorithm and Its Use with the Secure Real-Time Transport Protocol (SRTP) How to use the Korean SEED block cipher to encrypt and authenticate secure voice and video streams. RFC 5698 DSSC Data Structure for the Security Suitability of Cryptographic Algorithms (DSSC) A machine-readable policy that says which cryptographic algorithms are still safe to use, and until when. RFC 5848 Signed Syslog Signed Syslog Messages Syslog messages get detached signatures, so a log reader can check who wrote them, whether they were changed and whether any are missing. RFC 5857 IKEv2 for ROHCoIPsec IKEv2 Extensions to Support Robust Header Compression over IPsec How two IPsec peers use IKEv2 to agree on Robust Header Compression settings for a Child SA. RFC 5858 IPsec for ROHC IPsec Extensions to Support Robust Header Compression over IPsec The database fields and packet-handling rules IPsec needs so that header compression can run inside protected tunnels. RFC 5901 IODEF phishing Extensions to the IODEF-Document Class for Reporting Phishing A standard XML extension for sharing reports about phishing, from the first lure to the takedown of the site that collects stolen credentials. RFC 6161 Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type Adds elliptic curve ECDH and ECDSA as options for protecting encrypted key packages in CMS. RFC 6162 Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Asymmetric Key Package Content Type Adds elliptic curve ECDH and ECDSA as options for protecting asymmetric key packages in CMS. RFC 6290 IKEv2 crash detection A Quick Crash Detection Method for the Internet Key Exchange Protocol (IKE) A saved secret token lets a rebooted IKEv2 peer tell its partner to drop the dead tunnel and start over right away. RFC 6680 GSS-API Naming Generic Security Service Application Programming Interface (GSS-API) Naming Extensions New GSS-API calls that let applications read, set and export attributes of a name, such as group membership, for authorization. RFC 6734 Diameter key AVPs Diameter Attribute-Value Pairs for Cryptographic Key Transport A standard Diameter container for carrying several cryptographic keys in one message. RFC 7057 Update to the Extensible Authentication Protocol (EAP) Applicability Statement for Application Bridging for Federated Access Beyond Web (ABFAB) EAP is no longer only for network access: when it guards applications, channel bindings become mandatory. RFC 7191 CMS Key Receipts Cryptographic Message Syntax (CMS) Key Package Receipt and Error Content Types Two CMS message types that let a key package receiver say it arrived, or say exactly why it was rejected. RFC 7495 IODEF enumerations Enumeration Reference Format for the Incident Object Description Exchange Format (IODEF) A standard way for an incident report to say which kind of identifier it cites, such as a CVE number. RFC 7522 OAuth SAML Profile Security Assertion Markup Language (SAML) 2.0 Profile for OAuth 2.0 Client Authentication and Authorization Grants How a signed SAML assertion can be traded for an OAuth 2.0 access token, or used to prove who a client is. RFC 7590 TLS in XMPP Use of Transport Layer Security (TLS) in the Extensible Messaging and Presence Protocol (XMPP) Updates XMPP's TLS rules: follow the current TLS best practices, and do not trust a server that fails to advertise TLS. RFC 7833 SAML over RADIUS A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML) Carries SAML assertions and messages inside RADIUS so federated identity can reach beyond the web. RFC 8230 RSA for COSE Using RSA Algorithms with CBOR Object Signing and Encryption (COSE) Messages The identifiers and key formats that let COSE messages use RSA signatures and RSA key encryption. RFC 8270 SSH 2048-bit DH Minimum Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits SSH servers and clients should now use Diffie-Hellman groups of at least 2048 bits. RFC 8295 EST Extensions EST (Enrollment over Secure Transport) Extensions New EST path components that let a PKI server hand a device its certificates, keys, firmware and trust anchors, guided by a package list. RFC 8471 Token Binding The Token Binding Protocol Version 1.0 A way to tie login cookies and tokens to a key that never leaves the user's device, so stolen tokens stop working. RFC 8472 Token Binding TLS Transport Layer Security (TLS) Extension for Token Binding Protocol Negotiation The TLS extension that lets a client and server agree on Token Binding version and key type during the handshake. RFC 8559 RADIUS CoA Proxying Dynamic Authorization Proxying in the Remote Authentication Dial-In User Service (RADIUS) Protocol How RADIUS Change-of-Authorization and Disconnect messages can travel back through proxies from a home network to the visited network. RFC 8588 PASSporT SHAKEN Personal Assertion Token (PaSSporT) Extension for Signature-based Handling of Asserted information using toKENs (SHAKEN) Two extra claims that let a phone carrier say how sure it is about a caller and where the call began. RFC 8619 HKDF Algorithm IDs Algorithm Identifiers for the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) Gives HKDF, a key derivation function, three official names so protocols can say which hash it uses. RFC 8709 SSH Ed25519/Ed448 Ed25519 and Ed448 Public Key Algorithms for the Secure Shell (SSH) Protocol Names and wire formats for using Ed25519 and Ed448 signatures as SSH public key algorithms. RFC 8732 GSS-API kex SHA-2 Generic Security Service Application Program Interface (GSS-API) Key Exchange with SHA-2 New SHA-2 and elliptic-curve key exchange methods for SSH sessions that authenticate through GSS-API, replacing SHA-1 ones. RFC 8844 Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP) How an attacker can make a caller think they reached the wrong person over DTLS-SRTP, and the two TLS extensions that stop it. RFC 9068 JWT Access Tokens JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens A standard layout for OAuth 2.0 access tokens issued as JWTs, so servers from different vendors can issue and check them the same way. RFC 9115 ACME Delegated Certs An Automatic Certificate Management Environment (ACME) Profile for Generating Delegated Certificates How a CDN can get a certificate for your domain without ever holding your private key, and how you can cut it off. RFC 9118 STIR JWT Constraints Enhanced JSON Web Token (JWT) Claim Constraints for Secure Telephone Identity Revisited (STIR) Certificates A certificate extension that lets a STIR certificate say which claims a signed call token must carry, may carry, or must never carry. RFC 9201 Additional OAuth Parameters for Authentication and Authorization for Constrained Environments (ACE) Three small parameters that say which key an ACE access token is bound to, and which key the resource server uses. RFC 9237 AIF An Authorization Information Format (AIF) for Authentication and Authorization for Constrained Environments (ACE) A compact allow-list format that tells a constrained device which resources a client may use and how. RFC 9244 DOTS Telemetry Distributed Denial-of-Service Open Threat Signaling (DOTS) Telemetry How a DDoS mitigation client and server share traffic baselines, attack details and mitigation status over DOTS. RFC 9336 Document Signing EKU X.509 Certificate General-Purpose Extended Key Usage (EKU) for Document Signing A dedicated label that says a certificate's key is meant for signing documents people will read. RFC 9348 IP-TFS YANG A YANG Data Model for IP Traffic Flow Security A standard YANG schema for configuring and monitoring IP Traffic Flow Security on IPsec tunnels. RFC 9430 ACE DTLS Profile for TLS Extension of the Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE) to Transport Layer Security (TLS) A tiny update that says the ACE DTLS profile works over TLS too, so constrained devices can fall back to TCP. RFC 9493 SSE subject identifiers Subject Identifiers for Security Event Tokens A common JSON shape for saying who or what a security event is about, with named formats for emails, phone numbers and more. RFC 9528 EDHOC Ephemeral Diffie-Hellman Over COSE (EDHOC) A compact authenticated key exchange that lets tiny IoT devices agree on fresh keys in three small messages. RFC 9578 Privacy Pass issuance Privacy Pass Issuance Protocols How a client gets an anonymous Privacy Pass token from an issuer in a single request and response. RFC 9596 COSE typ header CBOR Object Signing and Encryption (COSE) "typ" (type) Header Parameter A header parameter that lets a COSE object say what kind of object it is. RFC 9662 Secure Syslog Ciphers Updates to the Cipher Suites in Secure Syslog Secure syslog gets a forward-secret cipher suite and drops DTLS 1.0, without cutting off older devices. RFC 9678 EAP-AKA' FS Forward Secrecy Extension to the Improved Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA' FS) An optional add-on that gives mobile network logins forward secrecy, so a stolen SIM key cannot unlock past sessions. RFC 9788 Email header protection Header Protection for Cryptographically Protected Email How to sign and encrypt the Subject and other email header fields, not just the message body, without breaking older mail clients. RFC 9814 SLH-DSA in CMS Use of the SLH-DSA Signature Algorithm in the Cryptographic Message Syntax (CMS) How to sign CMS messages with SLH-DSA, a post-quantum signature built only from hash functions. RFC 2093 GKMP Specification Group Key Management Protocol (GKMP) Specification An experimental protocol for creating one shared secret key for a whole group and handing it to each member. RFC 8446 TLS 1.3 The Transport Layer Security (TLS) Protocol Version 1.3 A major overhaul of TLS that removes legacy features, needs one round trip to set up, and requires forward secrecy. RFC 2818 HTTPS HTTP Over TLS Securing the web by layering HTTP over TLS, establishing the foundation for all secure web communication. RFC 1810 Report on MD5 Performance Measuring how fast MD5 can authenticate data in hardware and software. RFC 2268 RC2 A Description of the RC2(r) Encryption Algorithm A variable-key-size, 64-bit block cipher designed to run quickly on 16-bit microprocessors. RFC 2316 Report of the IAB Security Architecture Workshop A 1997 workshop report that argued security must be designed in, not bolted on. RFC 2704 KeyNote The KeyNote Trust-Management System Version 2 A trust-management system where signed, programmable assertions decide whether an action is allowed. RFC 3127 Authentication, Authorization, and Accounting: Protocol Evaluation The report of the panel that scored SNMP, Radius++, Diameter and COPS against the AAA network access requirements. RFC 3217 Triple-DES and RC2 Key Wrapping How to lock one Triple-DES or RC2 key inside another so it can be stored or sent safely. RFC 3329 SIP security agreement Security Mechanism Agreement for the Session Initiation Protocol (SIP) A secure way for a SIP phone and its first-hop server to agree on how to protect their conversation. RFC 3620 BEEP TUNNEL The TUNNEL Profile A BEEP profile that lets a peer act as an application-layer proxy, so authorized users can reach services through a firewall. RFC 3767 SACRED Securely Available Credentials Protocol A protocol for fetching your private keys and certificates from a credential server using any trusted workstation. RFC 4016 PANA Threat Analysis Protocol for Carrying Authentication and Network Access (PANA) Threat Analysis and Security Requirements The attacks a network-access login protocol must survive, and the eight requirements that follow. RFC 4186 EAP-SIM Extensible Authentication Protocol Method for Global System for Mobile Communications (GSM) Subscriber Identity Modules (EAP-SIM) How a phone's GSM SIM card can prove who you are to any network that speaks EAP, such as Wi-Fi. RFC 4210 CMP Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) The messages a certificate authority and its clients use to request, renew, update and revoke X.509 certificates online. RFC 4230 RSVP security RSVP Security Properties Security mechanisms for reserving network bandwidth and quality of service RFC 4387 PKIX over HTTP Internet X.509 Public Key Infrastructure Operational Protocols: Certificate Store Access via HTTP Fetch certificates and revocation lists from a PKI repository with plain HTTP GET requests. RFC 4778 Operational Security Current Practices in Internet Service Provider Environments How large ISPs protect their network infrastructure from attacks RFC 4832 NETLMM Security Threats Security Threats to Network-Based Localized Mobility Management (NETLMM) Security risks to network-based mobility management systems that allow devices to move while keeping their IP address. RFC 5387 BTNS Problem Statement Problem and Applicability Statement for Better-Than-Nothing Security (BTNS) Why IPsec without peer authentication can still be better than no security, and when to use it. RFC 5408 IBE Architecture Identity-Based Encryption Architecture and Supporting Data Structures How to build and run an identity-based encryption system RFC 5479 SRTP key management reqs Requirements and Analysis of Media Security Management Protocols A detailed requirements roadmap for securely negotiating SRTP keys in VoIP calls RFC 5713 Security Threats and Security Requirements for the Access Node Control Protocol (ANCP) What an attacker could do to the messages between a broadband access node and its network access server, and what protection the protocol must offer. RFC 5836 EAP Early Authentication Extensible Authentication Protocol (EAP) Early Authentication Problem Statement Pre-authenticating to a network before arriving to reduce handover delay. RFC 6024 Trust Anchor Management Requirements What relying parties need from trust anchor management systems and protocols. RFC 6274 IPv4 security assessment Security Assessment of the Internet Protocol Version 4 A comprehensive security analysis of IPv4 header fields, fragmentation, and implementation vulnerabilities RFC 6678 Requirements for a Tunnel-Based Extensible Authentication Protocol (EAP) Method The checklist a TLS-based EAP tunnel method had to meet: protect passwords, shield weak methods and hide who is logging in. RFC 6755 OAuth URN namespace An IETF URN Sub-Namespace for OAuth A reserved place in the URN space where OAuth specifications can register stable names. RFC 6813 The Network Endpoint Assessment (NEA) Asokan Attack Analysis A forwarding attack against endpoint health assessment protocols and countermeasures. RFC 7945 ICN Eval & Security Information-Centric Networking: Evaluation and Security Considerations Testing and securing a name-based networking approach RFC 8404 Pervasive encryption Effects of Pervasive Encryption on Operators How widespread encryption affects network operators' ability to manage, optimize, and secure networks. RFC 8903 Use Cases for DDoS Open Threat Signaling Example scenarios showing how organizations coordinate to stop DDoS attacks. RFC 9019 IoT Firmware Update A Firmware Update Architecture for Internet of Things A secure architecture for delivering and applying firmware updates to resource-constrained IoT devices. RFC 9058 MGM Multilinear Galois Mode (MGM) An AEAD encryption mode that encrypts data and authenticates it using the Galois field multilinear function. RFC 9106 Argon2 Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications A password hashing function that is deliberately hungry for memory, so attackers cannot cheaply guess at scale. RFC 9576 Privacy Pass arch. The Privacy Pass Architecture Privacy-preserving authentication and authorization with unlinkable tokens. RFC 9852 TLS 1.3 requirement New Protocols Using TLS Must Require TLS 1.3 New protocols that use TLS must make TLS 1.3 their default, and TLS 1.2 becomes an optional extra. RFC 2409 IKE The Internet Key Exchange (IKE) The original IPsec key exchange: two phases that set up a protected channel and then negotiate fresh keys for IPsec. RFC 5126 CAdES CMS Advanced Electronic Signatures (CAdES) A signature format built on CMS that can still be proven valid years later, even if someone denies having signed. RFC 6150 MD4 Historic MD4 to Historic Status Why the MD4 hash algorithm was retired and RFC 1320 moved to Historic status. RFC 9411 NGFW Benchmarking Benchmarking Methodology for Network Security Device Performance How to test the speed of next-generation firewalls and intrusion prevention systems so results can be compared fairly. RFC 1446 SNMPv2 security Security Protocols for version 2 of the Simple Network Management Protocol (SNMPv2) Authentication and encryption for network management messages RFC 2222 SASL Simple Authentication and Security Layer (SASL) A plug-in framework that lets any connection-based protocol add pluggable login methods and an optional security layer. RFC 4765 IDMEF The Intrusion Detection Message Exchange Format (IDMEF) A common XML format that lets intrusion detection tools report alerts and heartbeats to the same consoles. RFC 5090 RADIUS Digest RADIUS Extension for Digest Authentication New RADIUS attributes let a web or SIP server hand HTTP Digest checks to a central RADIUS server. RFC 6023 A Childless Initiation of the Internet Key Exchange Version 2 (IKEv2) Security Association (SA) An IKEv2 extension that sets up and authenticates a security association without also creating a Child SA. RFC 6379 Suite B Cryptographic Suites for IPsec Four ready-made IPsec option bundles that line up with the NSA's Suite B algorithms. RFC 7499 RADIUS Fragmentation Support of Fragmentation of RADIUS Packets A way to send large amounts of authorization data by splitting RADIUS packets across multiple exchanges. RFC 7802 Kerberos GSS-API PRF A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism How to derive extra key material from a Kerberos GSS-API security context, with the PRF+ counter fixed. RFC 7860 HMAC-SHA-2 for SNMPv3 HMAC-SHA-2 Authentication Protocols in User-Based Security Model (USM) for SNMPv3 Four stronger message-authentication options for SNMPv3, built on the SHA-2 hash family instead of MD5 and SHA-1. RFC 7930 Larger RADIUS Packets Larger Packets for RADIUS over TCP Lets RADIUS over TCP carry packets far bigger than the old 4096-octet limit, with a new error packet for when they are too big. RFC 8353 GSS-API Java update Generic Security Service API Version 2: Java Bindings Update The Java classes and methods for GSS-API version 2, now able to return an error token to the peer. RFC 9231 Additional XML Security Uniform Resource Identifiers (URIs) A corrected, updated list of the URIs that name algorithms and key types in XML signatures and encryption. RFC 9329 IKE/IPsec over TCP TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets How to carry IKE and ESP packets inside one TCP connection when a network blocks UDP. RFC 9598 Email addresses in X.509 Internationalized Email Addresses in X.509 Certificates How a certificate names an email address whose local part is not plain ASCII, and how to compare such names. RFC 9690 RSA-KEM in CMS Use of the RSA-KEM Algorithm in the Cryptographic Message Syntax (CMS) How to protect a message's encryption key with RSA-KEM, using the CMS KEMRecipientInfo structure. RFC 4492 ECC for TLS Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) How TLS handshakes can use elliptic curve key agreement and signatures instead of larger RSA or DH keys. RFC 2406 IPsec ESP IP Encapsulating Security Payload (ESP) The original IPsec header that encrypts and authenticates IP packets, replaced by RFC 4303. RFC 2402 IPsec AH IP Authentication Header How IPsec's Authentication Header proves an IP packet is genuine, unchanged and not a replay. RFC 2560 OCSP X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP Ask a server whether one certificate is still good, instead of downloading a whole revocation list. RFC 1281 Guidelines for the Secure Operation of the Internet Foundational security responsibilities for everyone participating in the Internet. RFC 2040 RC5 Algorithms The RC5, RC5-CBC, RC5-CBC-Pad, and RC5-CTS Algorithms A precise description of the RC5 block cipher and three ways to use it, so different implementations produce identical output. RFC 2792 DSA and RSA Key and Signature Encoding for the KeyNote Trust Management System How KeyNote writes down RSA and DSA keys, signatures and binary identifiers so every implementation reads them the same way. RFC 3112 LDAP Authentication Password Schema A schema for storing cryptographically hashed passwords in LDAP directories RFC 3157 SACRED Securely Available Credentials - Requirements What a protocol must do to let people move private keys and other credentials safely between their devices. RFC 3760 SACRED Securely Available Credentials (SACRED) - Credential Server Framework A framework for letting roaming users fetch their private keys and certificates from a credential server securely. RFC 3874 SHA-224 A 224-bit One-way Hash Function: SHA-224 SHA-224: SHA-256 with a different starting value and the output cut to 224 bits. RFC 4050 ECDSA for XML Signatures Using the Elliptic Curve Signature Algorithm (ECDSA) for XML Digital Signatures Using compact elliptic curve signatures to sign XML documents RFC 4284 EAP identity hints Identity Selection Hints for the Extensible Authentication Protocol (EAP) Help wireless devices find the right username to use. RFC 5169 Handover Key Management and Re-Authentication Problem Statement Speeding up authentication when mobile devices move between access points RFC 5193 Protocol for Carrying Authentication for Network Access (PANA) Framework The four players in PANA network-access authentication, how they talk, and the two kinds of networks it fits. RFC 5355 Threats Introduced by Reliable Server Pooling (RSerPool) and Requirements for Security in Response to Threats Security threats in server pooling and how to counter them. RFC 5409 IBE in CMS Using the Boneh-Franklin and Boneh-Boyen Identity-Based Encryption Algorithms with the Cryptographic Message Syntax (CMS) Identity-based encryption for encrypted email messages RFC 5570 CALIPSO Common Architecture Label IPv6 Security Option (CALIPSO) Labels for multi-level secure packet classification in closed IPv6 networks. RFC 5647 AES-GCM for SSH AES Galois Counter Mode for the Secure Shell Transport Layer Protocol Using a single cipher to provide both encryption and integrity checking in secure remote login RFC 5794 ARIA A Description of the ARIA Encryption Algorithm A Korean 128-bit block cipher with 128-, 192- and 256-bit keys, described step by step. RFC 5856 ROHC over IPsec Integration of Robust Header Compression over IPsec Security Associations Compressing packet headers inside encrypted tunnels to reduce bandwidth overhead. RFC 6027 IPsec Cluster Problem Statement Why clustering IPsec gateways is hard, and what needs fixing. RFC 6238 TOTP TOTP: Time-Based One-Time Password Algorithm How an authenticator app and a server agree on a six-digit code without talking to each other. RFC 6251 Kerberos over TLS Using Kerberos Version 5 over the Transport Layer Security (TLS) Protocol How a Kerberos client and its KDC can upgrade their TCP connection to TLS for privacy and extra authentication. RFC 6507 ECCSI Elliptic Curve-Based Certificateless Signatures for Identity-Based Encryption (ECCSI) Signing without certificates using just a user's identity. RFC 6508 SAKKE Sakai-Kasahara Key Encryption (SAKKE) Identity-based encryption using pairing-friendly curves for key exchange. RFC 6954 Brainpool-IKEv2 Using the Elliptic Curve Cryptography (ECC) Brainpool Curves for the Internet Key Exchange Protocol Version 2 (IKEv2) Using elliptic curve groups for secure key exchange RFC 7027 Brainpool for TLS Elliptic Curve Cryptography (ECC) Brainpool Curves for Transport Layer Security (TLS) Using secure, verifiable elliptic curves for encrypted web connections. RFC 7253 OCB The OCB Authenticated-Encryption Algorithm A block-cipher mode that encrypts and authenticates data in a single pass, with room to authenticate unencrypted headers too. RFC 7664 Dragonfly Dragonfly Key Exchange A password-based key exchange resistant to offline dictionary attacks RFC 7693 BLAKE2 The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC) A fast hash function with a built-in key, published with its full specification and reference C code. RFC 7815 Minimal IKEv2 Minimal Internet Key Exchange Version 2 (IKEv2) Initiator Implementation A stripped-down IKEv2 that only starts connections, built for tiny devices that wake up, send data and go back to sleep. RFC 7831 ABFAB Architecture Application Bridging for Federated Access Beyond Web (ABFAB) Architecture Single sign-on for non-web applications using federated identity RFC 8125 PAKE Requirements Requirements for Password-Authenticated Key Agreement (PAKE) Schemes Guidelines for designing secure password-based authentication protocols. RFC 8192 I2NSF Use Cases Interface to Network Security Functions (I2NSF): Problem Statement and Use Cases A standard interface for controlling security functions from any vendor. RFC 8645 Symmetric key re-keying Re-keying Mechanisms for Symmetric Keys Methods to extend the lifetime of symmetric encryption keys. RFC 8744 SNI encryption problems Issues and Requirements for Server Name Identification (SNI) Encryption in TLS Why hiding the website name in a TLS handshake is harder than it sounds, and what a good fix must do. RFC 8937 Randomness Wrapper Randomness Improvements for Security Protocols A way to mix a long-term private key into a random number generator so its output stays unpredictable even if the generator is broken. RFC 9150 TLS 1.3 Authentication and Integrity-Only Cipher Suites TLS 1.3 cipher suites for authentication without encryption RFC 9257 External PSKs in TLS Guidance for External Pre-Shared Key (PSK) Usage in TLS When a secret agreed in advance can safely secure TLS 1.3, and the rules for keeping it safe. RFC 9496 ristretto255, decaf448 The ristretto255 and decaf448 Groups Safe prime-order elliptic curve groups for cryptographic protocols. RFC 9497 OPRF Oblivious Pseudorandom Functions (OPRFs) Using Prime-Order Groups Two-party protocols to securely compute functions where the server holds a key and the client provides the input. RFC 4880 OpenPGP OpenPGP Message Format The packet formats that let OpenPGP software encrypt, sign and exchange keys and messages in an interoperable way. RFC 5272 CMC Certificate Management over CMS (CMC) A protocol for asking a certification authority for certificates, proving you hold the key, and managing them afterwards, built on CMS. RFC 1929 SOCKS5 Username/Password Username/Password Authentication for SOCKS V5 The simple username and password login step used by SOCKS version 5. RFC 2085 HMAC-MD5 IP Auth HMAC-MD5 IP Authentication with Replay Prevention A keyed MD5 transform for the IP Authentication Header, with an optional counter against replayed packets. RFC 2243 OTP Extended Responses OTP Extended Responses A way for a one-time-password response to say how it is encoded, and to restart a password sequence. RFC 2444 OTP SASL The One-Time-Password SASL Mechanism How to plug one-time passwords into any SASL-enabled protocol in one standard way. RFC 2726 PGP Authentication for RIPE Database Updates How the RIPE database can check that an update was really signed by the maintainer, using PGP. RFC 2947 Telnet 3DES CFB Telnet Encryption: DES3 64 bit Cipher Feedback How to protect a Telnet session with Triple-DES in cipher feedback mode, using 64-bit blocks. RFC 2948 Telnet 3DES OFB Telnet Encryption: DES3 64 bit Output Feedback How to protect a Telnet session with Triple-DES in output feedback mode, using 64-bit blocks. RFC 3586 IPSP IP Security Policy (IPSP) Requirements What a framework for managing, discovering and negotiating IPsec security policy must provide. RFC 3657 Camellia CMS Use of the Camellia Encryption Algorithm in Cryptographic Message Syntax (CMS) Object identifiers and key-wrap rules that let the Camellia cipher protect content in CMS messages. RFC 3923 XMPP E2E Encryption End-to-End Signing and Object Encryption for the Extensible Messaging and Presence Protocol (XMPP) How XMPP clients can sign and encrypt messages and presence end to end using S/MIME wrapped in an e2e element. RFC 3943 TLS LZS Compression Transport Layer Security (TLS) Protocol Compression Using Lempel-Ziv-Stac (LZS) How to squeeze TLS record payloads with the LZS algorithm, using compression method number 64. RFC 4010 SEED in CMS Use of the SEED Encryption Algorithm in Cryptographic Message Syntax (CMS) How to plug Korea's SEED block cipher into CMS for encrypting content and wrapping keys. RFC 4256 SSH keyboard-interactive Generic Message Exchange Authentication for the Secure Shell Protocol (SSH) One SSH login method where the server sends the prompts and the client just shows them and passes back the answers. RFC 4312 Camellia for IPsec The Camellia Cipher Algorithm and Its Use With IPsec How to use the Camellia block cipher in CBC mode to keep IPsec ESP packets confidential. RFC 4344 SSH Encryption Modes The Secure Shell (SSH) Transport Layer Encryption Modes New counter-mode ciphers for SSH, plus firm advice on how often to swap encryption keys. RFC 4372 Chargeable-User-Identity Chargeable User Identity A RADIUS attribute that gives roaming partners a temporary billing handle without revealing who the user is. RFC 4430 KINK Kerberized Internet Negotiation of Keys (KINK) How two hosts use Kerberos tickets to set up IPsec security associations in as few as two messages. RFC 4490 GOST with CMS Using the GOST 28147-89, GOST R 34.11-94, GOST R 34.10-94, and GOST R 34.10-2001 Algorithms with Cryptographic Message Syntax (CMS) How to plug four Russian GOST algorithms into the Cryptographic Message Syntax used for signed and encrypted messages. RFC 4534 GSPT Group Security Policy Token v1 A signed, ASN.1-encoded rulebook that tells every member of a secure multicast group which security mechanisms the group uses. RFC 4537 Kerberos etype negotiate Kerberos Cryptosystem Negotiation Extension Lets a Kerberos client and server agree on a stronger encryption type than the KDC picked for the ticket. RFC 4615 AES-CMAC-PRF-128 The Advanced Encryption Standard-Cipher-based Message Authentication Code-Pseudo-Random Function-128 (AES-CMAC-PRF-128) Algorithm for the Internet Key Exchange Protocol (IKE) A pseudo-random function built on AES-CMAC that lets IKEv2 use AES with keys of any length. RFC 4807 IPsec SPD MIB IPsec Security Policy Database Configuration MIB A standard SNMP table set for writing the rulebook that tells an IPsec device which packets to accept, drop or protect. RFC 5179 Generic Security Service Application Program Interface (GSS-API) Domain-Based Service Names Mapping for the Kerberos V GSS Mechanism How a domain-based GSS-API service name becomes a three-part Kerberos V principal name. RFC 5275 CMS Key Management CMS Symmetric Key Management and Distribution How a group of people can share one symmetric key, and how that key is handed out and replaced when membership changes. RFC 5433 EAP-GPSK Extensible Authentication Protocol - Generalized Pre-Shared Key (EAP-GPSK) Method A lightweight way for two parties that already share a secret key to prove it to each other and derive fresh session keys. RFC 5752 CMS Multi-Signature Multiple Signatures in Cryptographic Message Syntax (CMS) A signed attribute that lets a verifier notice when someone strips the stronger of a signer's several CMS signatures. RFC 5756 Updates for RSAES-OAEP and RSASSA-PSS Algorithm Parameters A small fix to how RSA-OAEP and RSA-PSS parameters appear in X.509 certificates. RFC 5816 ESSCertIDv2 for TSP ESSCertIDv2 Update for RFC 3161 Lets RFC 3161 time-stamp tokens name the signing certificate with a hash other than SHA-1. RFC 5840 WESP Wrapped Encapsulating Security Payload (ESP) for Traffic Visibility A small wrapper header that lets network devices see at a glance whether an IPsec ESP packet is encrypted. RFC 5998 An Extension for EAP-Only Authentication in IKEv2 Lets IKEv2 authenticate the gateway with a strong EAP method alone, without a public key signature. RFC 6010 CMS Content Constraints Cryptographic Message Syntax (CMS) Content Constraints Extension A certificate extension that says which kinds of signed content a public key is allowed to vouch for. RFC 6042 TLS KeyNote Transport Layer Security (TLS) Authorization Using KeyNote How to send KeyNote credentials during a TLS handshake, either inline or by URL. RFC 6054 Using Counter Modes with Encapsulating Security Payload (ESP) and Authentication Header (AH) to Protect Group Traffic How many senders can share one IPsec key with counter-mode ciphers without ever repeating an IV. RFC 6063 DSKPP Dynamic Symmetric Key Provisioning Protocol (DSKPP) How a security token or app gets its secret key from a provisioning server, either agreed jointly or delivered in protected form. RFC 6072 Certificate Management Service for the Session Initiation Protocol (SIP) A SIP service that hands out users' certificates, and optionally their private keys, so end-to-end encryption becomes practical. RFC 6111 Additional Kerberos Naming Constraints Reserves 'WELLKNOWN' Kerberos names for special meanings and says what servers must do when they do not support one. RFC 6160 Algorithms for Cryptographic Message Syntax (CMS) Protection of Symmetric Key Package Content Types Which signature, key transport and key wrap algorithms to support when CMS protects symmetric key packages. RFC 6209 ARIA TLS Addition of the ARIA Cipher Suites to Transport Layer Security (TLS) Registers 54 TLS cipher suites that use the Korean ARIA block cipher, with SHA-2 hashes, GCM and pre-shared keys. RFC 6311 IKEv2/IPsec HA Protocol Support for High Availability of IKEv2/IPsec How a standby VPN gateway takes over mid-session without its IKEv2 and IPsec counters falling out of step with the peer. RFC 6495 SEND SKI name types Subject Key Identifier (SKI) SEcure Neighbor Discovery (SEND) Name Type Fields New SEND Trust Anchor name types that identify a trust anchor by a hash of its Subject Key Identifier. RFC 6542 Krb5 Channel Binding Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Channel Binding Hash Agility Lets the Kerberos GSS-API mechanism tie a login to a connection using a negotiated algorithm instead of MD5. RFC 6560 Kerberos OTP Pre-Auth One-Time Password (OTP) Pre-Authentication How a Kerberos client proves who it is with a code that works only once, instead of a reusable password. RFC 6818 Updates to the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Small but important fixes to the X.509 certificate profile: text encodings, internationalized names and trust anchors. RFC 7171 PT-EAP PT-EAP: Posture Transport (PT) Protocol for Extensible Authentication Protocol (EAP) Tunnel Methods A tiny EAP method that carries endpoint health reports inside a protected tunnel before a device joins the network. RFC 7562 TLS DTCP Authorization Transport Layer Security (TLS) Authorization Using Digital Transmission Content Protection (DTCP) Certificates How a TV or set-top box can show its content-protection certificate during a TLS handshake. RFC 7628 SASL for OAuth A Set of Simple Authentication and Security Layer (SASL) Mechanisms for OAuth Two SASL mechanisms that let email and similar non-HTTP protocols log in with an OAuth token instead of a password. RFC 7634 ChaCha20 for IPsec ChaCha20, Poly1305, and Their Use in the Internet Key Exchange Protocol (IKE) and IPsec How IPsec and IKEv2 use ChaCha20-Poly1305 as a standby cipher alongside AES. RFC 7670 IKEv2 Raw Public Keys Generic Raw Public-Key Support for IKEv2 Lets IKEv2 carry any kind of raw public key, not just RSA, by sending a SubjectPublicKeyInfo structure. RFC 7751 Kerberos Authorization Data Container Authenticated by Multiple Message Authentication Codes (MACs) A Kerberos ticket container that carries several checksums, so both the KDC and services can check the authorization data inside. RFC 8052 GDOI for IEC 62351 Group Domain of Interpretation (GDOI) Protocol Support for IEC 62351 Security Services How GDOI hands out group keys and policy for IEC 61850 messages in power substations. RFC 8070 PKINIT Freshness Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Freshness Extension A KDC-issued freshness token that proves a Kerberos PKINIT client holds its private key right now, not just that it used it once. RFC 8419 EdDSA CMS Use of Edwards-Curve Digital Signature Algorithm (EdDSA) Signatures in the Cryptographic Message Syntax (CMS) How to sign CMS messages with the modern Ed25519 and Ed448 signature algorithms. RFC 8449 TLS Record Size Limit Record Size Limit Extension for TLS A TLS extension that lets each side tell the other the largest protected record it is willing to receive. RFC 8598 IKEv2 Split DNS Split DNS Configuration for the Internet Key Exchange Protocol Version 2 (IKEv2) How an IKEv2 VPN can tell a client which domain names to look up through the tunnel and which to leave alone. RFC 8636 PKINIT algorithm agility Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility Lets Kerberos public-key logins negotiate their key derivation function and discover which hash algorithms a server accepts. RFC 8657 CAA account and method Certification Authority Authorization (CAA) Record Extensions for Account URI and Automatic Certificate Management Environment (ACME) Method Binding Two CAA parameters that let a domain name the exact CA account, and the exact validation method, allowed to get its certificates. RFC 8693 OAuth token exchange OAuth 2.0 Token Exchange How a client trades one security token for another, optionally to act on someone else's behalf. RFC 8738 ACME IP identifiers Automated Certificate Management Environment (ACME) IP Identifier Validation Extension Lets ACME certificate authorities validate and issue certificates for IP addresses. RFC 8750 Implicit IV for ESP Implicit Initialization Vector (IV) for Counter-Based Ciphers in Encapsulating Security Payload (ESP) Saves 8 bytes per IPsec packet by building the cipher's IV from the sequence number instead of sending it. RFC 8760 SIP Digest auth The Session Initiation Protocol (SIP) Digest Access Authentication Scheme SIP Digest authentication gets stronger hash algorithms such as SHA-256 so MD5 is no longer the only option. RFC 8778 HSS/LMS in COSE Use of the HSS/LMS Hash-Based Signature Algorithm with CBOR Object Signing and Encryption (COSE) How to sign COSE messages with HSS/LMS hash-based signatures, which are designed to survive quantum computers. RFC 8870 EKT Encrypted Key Transport for DTLS and Secure RTP Carries each sender's SRTP key inside its own packets, wrapped in a group key delivered over DTLS. RFC 8879 TLS cert compression TLS Certificate Compression Shrinking the certificate chain in a TLS 1.3 handshake with zlib, Brotli or Zstandard. RFC 8933 CMS Algorithm Protection Update to the Cryptographic Message Syntax (CMS) for Algorithm Identifier Protection Closes a gap in CMS signatures so attackers cannot swap the hash algorithm behind a signed message. RFC 8940 EAP Session-Id Extensible Authentication Protocol (EAP) Session-Id Derivation for EAP Subscriber Identity Module (EAP-SIM), EAP Authentication and Key Agreement (EAP-AKA), and Protected EAP (PEAP) Fills the gaps in how EAP-SIM, EAP-AKA and PEAP name a session, including after a fast reconnect. RFC 8973 DOTS Discovery DDoS Open Threat Signaling (DOTS) Agent Discovery How a DDoS signaling client finds the server to ask for help, using DHCP, DNS records or DNS service discovery. RFC 9044 AES-GMAC in CMS Using the AES-GMAC Algorithm with the Cryptographic Message Syntax (CMS) The identifiers and parameters for using the AES-GMAC authentication code inside CMS messages. RFC 9126 OAuth PAR OAuth 2.0 Pushed Authorization Requests A way for an OAuth client to hand its authorization request straight to the server and get back a short reference to use instead. RFC 9173 BPSec Contexts Default Security Contexts for Bundle Protocol Security (BPSec) The two ready-made security recipes, HMAC integrity and AES-GCM encryption, for securing Bundle Protocol traffic. RFC 9207 OAuth 2.0 Authorization Server Issuer Identification A one-parameter fix that lets an OAuth client check which authorization server actually sent a response. RFC 9278 JWK Thumbprint URI JWK Thumbprint URI A URN prefix that lets a JWK Thumbprint be used wherever an identifier must be a URI. RFC 9289 Encrypted RPC Towards Remote Procedure Call Encryption by Default How ONC RPC peers can upgrade to TLS on the same port, falling back gracefully when the other side cannot. RFC 9345 Delegated Credentials Delegated Credentials for TLS and DTLS Let a TLS server mint its own short-lived signing credentials from its certificate, without going back to the CA. RFC 9349 IP-TFS MIB Definitions of Managed Objects for IP Traffic Flow Security A read-only SNMP MIB for watching IP Traffic Flow Security on IPsec tunnels. RFC 9360 COSE X.509 Headers CBOR Object Signing and Encryption (COSE): Header Parameters for Carrying and Referencing X.509 Certificates Four header parameters that let a COSE message carry an X.509 certificate or point to one. RFC 9396 OAuth RAR OAuth 2.0 Rich Authorization Requests A JSON parameter that lets OAuth clients ask for precise permissions instead of coarse scope strings. RFC 9447 ACME authority token Automated Certificate Management Environment (ACME) Challenges Using an Authority Token A generic ACME challenge where a certificate applicant proves its right to a name by presenting a signed token from the authority that owns that namespace. RFC 9448 TNAuthList ACME profile TNAuthList Profile of Automated Certificate Management Environment (ACME) Authority Token How a phone provider proves, through ACME, that it may get a certificate for particular telephone numbers. RFC 9459 COSE AES-CTR and CBC CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC How to use plain AES counter and CBC encryption in COSE, for cases where something else already protects integrity. RFC 9509 EKU for 5G NFs X.509 Certificate Extended Key Usage (EKU) for 5G Network Functions Three new certificate purpose labels so 5G network functions can prove a key is for signing tokens or encrypting JSON, and nothing else. RFC 9575 DRIP DET authentication DRIP Entity Tag (DET) Authentication Formats and Protocols for Broadcast Remote Identification (RID) Signed drone broadcasts that nearby observers can check, even with no Internet connection. RFC 9597 CWT claims in COSE CBOR Web Token (CWT) Claims in COSE Headers A COSE header parameter that carries CWT claims outside the payload, readable before decryption. RFC 9635 GNAP Grant Negotiation and Authorization Protocol (GNAP) A newer, key-bound way for software to ask for permission, negotiated step by step with an authorization server. RFC 9646 SZTP CSR Conveying a Certificate Signing Request (CSR) in a Secure Zero-Touch Provisioning (SZTP) Bootstrapping Request How a new network device asks for its own identity certificate while it is first being set up. RFC 9679 COSE Key Thumbprint CBOR Object Signing and Encryption (COSE) Key Thumbprint A fingerprint for a COSE key: hash only the required fields, in a fixed encoding, to get a stable name for the key. RFC 9684 CHARRA YANG Model A YANG Data Model for Challenge-Response-Based Remote Attestation (CHARRA) Procedures Using Trusted Platform Modules (TPMs) A standard YANG interface for asking a network device to prove, with a TPM-signed quote, what software it booted. RFC 9763 Related certificates Related Certificates for Use in Multiple Authentications within a Protocol A certificate request attribute and an X.509 extension that prove two certificates belong to the same entity. RFC 9781 UCCS CBOR tag A Concise Binary Object Representation (CBOR) Tag for Unprotected CBOR Web Token Claims Sets (UCCS) A CBOR tag for sending CWT claims without a signature, when a secure channel already protects them. RFC 9802 HSS and XMSS in X.509 Use of the HSS and XMSS Hash-Based Signature Algorithms in Internet X.509 Public Key Infrastructure How to name and encode HSS, XMSS and XMSS^MT hash-based signature keys in X.509 certificates and CRLs. RFC 9827 IKEv2 SN rename Renaming the Extended Sequence Numbers (ESN) Transform Type in the Internet Key Exchange Protocol Version 2 (IKEv2) IKEv2 Transform Type 5 stops being only about 'extended' sequence numbers and becomes a general way to describe IPsec sequence numbers. RFC 9867 PPK in IKE_INTERMEDIATE Mixing Preshared Keys in the IKE_INTERMEDIATE and CREATE_CHILD_SA Exchanges of the Internet Key Exchange Protocol Version 2 (IKEv2) for Post-Quantum Security Mixing a post-quantum preshared key into IKEv2 earlier, so even the initial IKE SA is protected, and again later when rekeying. RFC 9882 ML-DSA in CMS Use of the ML-DSA Signature Algorithm in the Cryptographic Message Syntax (CMS) How to sign CMS messages with ML-DSA, a signature scheme designed to resist quantum computers. RFC 9883 Key possession attr An Attribute for Statement of Possession of a Private Key A signed statement that lets a certificate requester claim it holds a private key, instead of proving it. RFC 9901 SD-JWT Selective Disclosure for JSON Web Tokens Sign a token once, then let its owner reveal only the claims each recipient needs. RFC 9909 SLH-DSA in X.509 Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA) How to put hash-based, quantum-resistant SLH-DSA signatures and keys into X.509 certificates and CRLs. RFC 9921 COSE RFC 3161 timestamps CBOR Object Signing and Encryption (COSE) Header Parameter for Timestamp Tokens as Defined in RFC 3161 Two COSE header parameters that carry an RFC 3161 timestamp token inside a signed COSE message. RFC 9925 Unsigned X.509 certs Unsigned X.509 Certificates A standard blank signature for X.509 certificates that carry subject information but have no real issuer. RFC 9934 PEM for ECH Privacy-Enhanced Mail (PEM) File Format for Encrypted ClientHello (ECH) A standard PEM file that holds an ECH private key and its public config, so any TLS server can load it. RFC 9939 PKCS #8 content types PKCS #8: Private-Key Information Content Types Gives private-key files two official identifiers so they can travel inside CMS messages. RFC 9943 SCITT architecture An Architecture for Trustworthy and Transparent Digital Supply Chains A common notary-style architecture that makes signed statements about supply chain artifacts publicly auditable. RFC 9944 SCIM device schema Device Schema Extensions to the System for Cross-Domain Identity Management (SCIM) Model Extends SCIM from provisioning people to provisioning devices, with schemas for BLE, Wi-Fi Easy Connect, FDO, MAB and Zigbee. RFC 9963 RSA PKCS1 in TLS 1.3 Legacy RSASSA-PKCS1-v1_5 Code Points for TLS 1.3 Three TLS 1.3 code points so old hardware keys can still sign client certificate handshakes. RFC 9964 ML-DSA in JOSE and COSE ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) How to sign JSON and CBOR messages with ML-DSA, a signature scheme designed to resist future quantum computers. RFC 9980 PQC in OpenPGP Post-Quantum Cryptography in OpenPGP New OpenPGP key types that pair post-quantum algorithms with elliptic curves, so a future quantum computer cannot read or forge the traffic. RFC 9987 SSH agent protocol Secure Shell (SSH) Agent Protocol How SSH clients ask a separate agent process to hold private keys and sign on their behalf. RFC 9995 COSE hash envelope CBOR Object Signing and Encryption (COSE) Hash Envelope Sign a hash of a document instead of the document, and say where to find the original. RFC 9999 RATS CMW Remote ATtestation procedureS (RATS) Conceptual Message Wrapper (CMW) A common envelope that labels and carries remote attestation messages in CBOR, JSON, JWT, CWT and X.509 formats. RFC 10013 EAT measured component Entity Attestation Token (EAT) Measured Component A common record for the fingerprint of one piece of firmware or software, ready to ride inside an Entity Attestation Token. RFC 10024 Hybrid ML-KEM for TLS Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3 Three TLS 1.3 key agreement groups that pair post-quantum ML-KEM with a classic elliptic curve exchange. RFC 10031 MAC addresses in X.509 Media Access Control (MAC) Addresses in X.509 Certificates A standard way to put a device's hardware (MAC) address into an X.509 certificate, and to constrain it. RFC 4366 TLS Extensions Transport Layer Security (TLS) Extensions A way for TLS clients and servers to add optional features to their opening hello messages without breaking older software. RFC 4347 DTLS 1.0 Datagram Transport Layer Security TLS adapted to survive lost, reordered and duplicated packets, so datagram applications can be secured too. RFC 2284 PPP EAP PPP Extensible Authentication Protocol (EAP) A PPP authentication method that lets the link pick the actual login scheme only after it is up. RFC 8422 ECC for TLS 1.2 Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS) Versions 1.2 and Earlier How TLS 1.2 and earlier use elliptic curve Diffie-Hellman and elliptic curve signatures in the handshake. RFC 6125 TLS Server Identity Representation and Verification of Domain-Based Application Service Identity within Internet PKI Using X.509 Certificates How a TLS client checks that a server's certificate really names the service it meant to reach, and how certificates should carry that name. RFC 2574 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) Per-user authentication, encryption and replay protection for SNMPv3 management messages. RFC 5070 IODEF The Incident Object Description Exchange Format A common XML format for security teams to describe computer security incidents to each other. RFC 2829 LDAP authentication Authentication Methods for LDAP Which ways of proving identity every LDAPv3 directory must support, and how to combine them with TLS. RFC 2830 LDAP over TLS Lightweight Directory Access Protocol (v3): Extension for Transport Layer Security How an ordinary LDAP connection is upgraded to TLS in the middle of a session. RFC 4474 SIP identity Enhancements for Authenticated Identity Management in the Session Initiation Protocol (SIP) A signed Identity header lets a domain vouch for who really sent a SIP request. RFC 1507 DASS DASS - Distributed Authentication Security Service An experimental architecture for proving who users, servers and computers are across a network, using public keys and a hierarchy of certification authorities. RFC 2521 ICMP Security Failures Messages ICMP messages for reporting authentication, encryption, and authorization failures in IPsec RFC 2693 SPKI Theory SPKI Certificate Theory How SPKI certificates prove authorization, not identity. RFC 2903 Generic AAA Architecture A general framework where one AAA server handles authentication, authorization, and accounting for many applications. RFC 3125 Signature Policies Electronic Signature Policies A written and machine-readable rulebook that says exactly when an electronic signature counts as valid. RFC 5776 TESLA for ALC/NORM Use of Timed Efficient Stream Loss-Tolerant Authentication (TESLA) in the Asynchronous Layered Coding (ALC) and NACK-Oriented Reliable Multicast (NORM) Protocols How a multicast sender proves its packets are real by revealing signing keys a little later, in the ALC and NORM protocols. RFC 6496 Secure Proxy ND Secure Proxy ND Support for SEcure Neighbor Discovery (SEND) Digital signatures for IPv6 proxies answering on behalf of other nodes. RFC 7585 RADIUS Dynamic Discovery Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Based on the Network Access Identifier (NAI) How a RADIUS server finds the right peer for a user's realm by looking it up in DNS, and checks that the peer is allowed to speak for that realm. RFC 9986 Keyed ISAAC BFD Meticulous Keyed ISAAC for Bidirectional Forwarding Detection (BFD) Optimized Authentication A cheap secret-number check that lets BFD keep a link marked Up without hashing every packet. RFC 2630 CMS Cryptographic Message Syntax A common envelope format for digitally signing, digesting, authenticating or encrypting any message. RFC 4386 PKIX Repository Locator Internet X.509 Public Key Infrastructure Repository Locator Service How a certificate-using program can find a domain's PKI repository by asking DNS for an SRV record. RFC 6071 IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap A guide to the many RFCs that define, extend and use IPsec and IKE, as of February 2011. RFC 6091 OpenPGP in TLS Using OpenPGP Keys for Transport Layer Security (TLS) Authentication How a TLS client and server agree to authenticate with OpenPGP certificates instead of X.509. RFC 6331 Moving DIGEST-MD5 to Historic Why the DIGEST-MD5 login mechanism was declared obsolete and RFC 2831 moved to Historic. RFC 5273 CMC Transport Certificate Management over CMS (CMC): Transport Protocols Four ways to move CMC certificate request and response messages: files, mail, HTTP and plain TCP. RFC 4282 NAI The Network Access Identifier The user@realm format that tells a roaming network where to send your login for checking. RFC 2459 X.509 PKI Profile Internet X.509 Public Key Infrastructure Certificate and CRL Profile How to use digital certificates to prove identity on the internet. RFC 8996 Deprecate TLS 1.0/1.1 Deprecating TLS 1.0 and TLS 1.1 The IETF formally retires TLS 1.0, TLS 1.1 and DTLS 1.0 and says implementations must not negotiate them. RFC 4013 SASLprep SASLprep: Stringprep Profile for User Names and Passwords A recipe for cleaning up Unicode user names and passwords so they compare the same everywhere. RFC 1825 IP Security Architecture Security Architecture for the Internet Protocol Encrypting and authenticating IP packets at the network layer RFC 1826 IP Authentication Header IP Authentication Header Cryptographic authentication to verify IP datagrams came from who they claim and haven't been altered in transit. RFC 2138 RADIUS Remote Authentication Dial In User Service (RADIUS) A protocol for a network device to verify that a user is authorized and to learn what service to give them. RFC 1750 Randomness Randomness Recommendations for Security How to generate unpredictable random numbers that resist attacks by determined adversaries. RFC 5274 CMC Compliance Certificate Management Messages over CMS (CMC): Compliance Requirements The checklist of what a certificate-enrollment client, registration authority or CA must support to count as compliant CMC. RFC 1447 SNMPv2 Party MIB Party MIB for version 2 of the Simple Network Management Protocol (SNMPv2) Managed objects defining parties, authentication, privacy, and access control for SNMPv2. RFC 4345 SSH Arcfour Improved Arcfour Modes for the Secure Shell (SSH) Transport Layer Protocol Safer ways to use Arcfour encryption in SSH RFC 6101 SSL 3.0 The Secure Sockets Layer (SSL) Protocol Version 3.0 The foundational security protocol that became Transport Layer Security (TLS). RFC 6380 Suite B Profile for Internet Protocol Security (IPsec) How to use the US NSA Suite B cryptography with IPsec and IKEv2, mostly by pointing at other documents. RFC 3447 RSA Cryptography Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1 The specification of RSA encryption and signatures: key formats, basic operations and the padding schemes that make them safe to use. RFC 3369 CMS Cryptographic Message Syntax (CMS) A general envelope format for signing, encrypting, digesting and authenticating any message content. RFC 6712 CMP over HTTP Internet X.509 Public Key Infrastructure -- HTTP Transfer for the Certificate Management Protocol (CMP) How to carry certificate management messages over plain HTTP POST requests. RFC 7170 TEAP Tunnel Extensible Authentication Protocol (TEAP) Version 1 A standards-track EAP method that builds a TLS tunnel first, then does the real authentication inside it. RFC 1511 Common Authentication Technology Overview A framework for security services that any network protocol can use. RFC 1636 Report of IAB Workshop on Security in the Internet Architecture - February 8-10, 1994 Workshop report on security challenges as the Internet adds new services. RFC 1675 Security Concerns for IPng A security analyst's checklist: IPng must not make networks harder to protect. RFC 1827 IP ESP IP Encapsulating Security Payload (ESP) Encrypted packets for secure IP communication. RFC 2286 HMAC-RIPEMD Test Cases Test Cases for HMAC-RIPEMD160 and HMAC-RIPEMD128 Test vectors for checking HMAC message authentication with RIPEMD hash functions. RFC 2367 PF_KEY PF_KEY Key Management API, Version 2 A system call interface for managing cryptographic keys in the kernel. RFC 2504 Users' Security Handbook Plain advice for ordinary computer users on keeping their data, accounts and networks safe, written in 1999. RFC 2528 Internet X.509 Public Key Infrastructure Representation of Key Exchange Algorithm (KEA) Keys in Internet X.509 Public Key Infrastructure Certificates How to encode Key Exchange Algorithm keys inside standard X.509 digital certificates. RFC 2709 Security Model with Tunnel-mode IPsec for NAT Domains How network address translation and IPsec can work together to protect traffic from private networks. RFC 2905 AAA Authorization Application Examples Real-world authorization needs from dial-up, mobile, printing, e-commerce, and education services. RFC 2906 AAA Authorization Requirements A comprehensive requirements checklist for Authentication, Authorization, and Accounting protocols. RFC 3078 MPPE Microsoft Point-To-Point Encryption (MPPE) Protocol Encrypts Point-to-Point Protocol packets using the RC4 algorithm. RFC 3129 Kerberized IKE Requirements for Kerberized Internet Negotiation of Keys Using a trusted server instead of peer-to-peer to negotiate secure connections RFC 3379 DPV and DPD requirements Delegated Path Validation and Delegated Path Discovery Protocol Requirements Requirements for letting servers validate certificates and collect certificate information on behalf of clients. RFC 3457 IPsec remote access Requirements for IPsec Remote Access Scenarios Security requirements for different ways employees and partners access corporate networks. RFC 3631 Security Mechanisms for the Internet An IAB guide to choosing among standard Internet security mechanisms, and to the ones to avoid. RFC 4212 Alt Cert Formats Alternative Certificate Formats for the Public-Key Infrastructure Using X.509 (PKIX) Certificate Management Protocols How to ask a PKIX certificate authority for attribute or OpenPGP certificates using the same request syntax as X.509. RFC 4595 IKEv2 for Fibre Channel Use of IKEv2 in the Fibre Channel Security Association Management Protocol Adapting IKEv2 to secure Fibre Channel networks RFC 4672 RADIUS DAC MIB RADIUS Dynamic Authorization Client MIB Management objects for RADIUS Dynamic Authorization Client side. RFC 4673 RADIUS DAS MIB RADIUS Dynamic Authorization Server MIB Management objects for RADIUS Dynamic Authorization Server side. RFC 4758 CT-KIP Cryptographic Token Key Initialization Protocol (CT-KIP) Version 1.0 Revision 1 Protocol for securely initializing cryptographic tokens with shared keys. RFC 4766 IDWG Requirements Intrusion Detection Message Exchange Requirements Specification requirements for exchanging intrusion detection alerts between systems. RFC 4768 Desired Enhancements to Generic Security Services Application Program Interface (GSS-API) Version 3 Naming Enhancements to the naming and authorization architecture of GSS-API. RFC 4772 Security Implications of Using the Data Encryption Standard (DES) Why DES encryption is no longer safe and what to use instead. RFC 5207 NAT and Firewall Traversal Issues of Host Identity Protocol (HIP) Communication Why NATs and firewalls get in the way of the Host Identity Protocol, and what could be done about it. RFC 5349 Elliptic Curve Cryptography (ECC) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Using elliptic curves for Kerberos public-key login RFC 5406 Guidelines for Specifying the Use of IPsec Version 2 Why writing 'just use IPsec' in a specification is not enough, and what a spec must say if it does choose IPsec. RFC 5421 EAP-FAST Password Basic Password Exchange within the Flexible Authentication via Secure Tunneling Extensible Authentication Protocol (EAP-FAST) How a plain username and password are carried safely inside the EAP-FAST encrypted tunnel. RFC 5528 Camellia CTR and CCM Camellia Counter Mode and Camellia Counter with CBC-MAC Mode Algorithms Test vectors for two encryption modes of the Camellia block cipher RFC 5609 PANA state machines State Machines for the Protocol for Carrying Authentication for Network Access (PANA) State machine specifications for PANA client and authentication agent protocol implementations. RFC 5708 X.509 Key and Signature Encoding for the KeyNote Trust Management System How KeyNote credentials can name an X.509 certificate as a key, and which hash functions their signatures may use. RFC 5803 SCRAM LDAP Schema Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted Challenge Response Authentication Mechanism (SCRAM) Secrets How an LDAP directory can store the secrets a server needs to check SCRAM logins. RFC 5877 pkix-attr-cert The application/pkix-attr-cert Media Type for Attribute Certificates The registered media type for sending a single attribute certificate. RFC 5915 Elliptic Curve Private Key Structure A standard ASN.1 wrapper for storing or sending an elliptic curve private key together with its curve and public key. RFC 5937 Using Trust Anchor Constraints during Certification Path Processing How to enforce limits on what a trusted certificate signer can certify RFC 5941 Thraud Sharing Transaction Fraud Data A standardized format for reporting fraudulent financial transactions RFC 6229 RC4 test vectors Test Vectors for the Stream Cipher RC4 Known-answer keystream outputs that let implementers check whether their RC4 code is correct. RFC 6404 SPEERMINT threats Session PEERing for Multimedia INTerconnect (SPEERMINT) Security Threats and Suggested Countermeasures Catalogs security risks when SIP service providers peer to exchange voice calls and proposes concrete safeguards. RFC 6509 MIKEY-SAKKE MIKEY-SAKKE: Sakai-Kasahara Key Encryption in Multimedia Internet KEYing (MIKEY) Identity-based key exchange for multimedia calls with built-in source authentication. RFC 7029 Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding Why EAP tunnel methods need to protect the peer as well as the server, and how EMSK-based binding does it. RFC 7123 IPv6 on IPv4 Networks Security Implications of IPv6 on IPv4 Networks Why a network that thinks it is IPv4-only can still be attacked over IPv6, and how to filter it. RFC 7194 IRC over TLS Port Default Port for Internet Relay Chat (IRC) via TLS/SSL Writes down the common practice of running encrypted IRC on TCP port 6697. RFC 7251 AES-CCM ECC for TLS AES-CCM Elliptic Curve Cryptography (ECC) Cipher Suites for TLS Compact encryption recipes for small devices and limited bandwidth networks. RFC 7632 Endpoint Security Posture Assessment: Enterprise Use Cases Use cases for collecting data from endpoints and checking it against policy, as groundwork for common standards. RFC 7739 Security Implications of Predictable Fragment Identification Values Why IPv6 fragment IDs must not be predictable RFC 8134 MILE Report Management Incident Lightweight Exchange (MILE) Implementation Report A survey of how the incident-sharing standards from IETF are actually being implemented RFC 8146 EAP-pwd Salted Adding Support for Salted Password Databases to EAP-pwd How EAP-pwd can authenticate against password databases that store salted hashes instead of plain passwords. RFC 8152 COSE CBOR Object Signing and Encryption (COSE) Sign, encrypt, and MAC data in the compact CBOR format for IoT and constrained devices. RFC 8235 Schnorr NIZK Proof Schnorr Non-interactive Zero-Knowledge Proof Prove you know a secret without revealing it. RFC 8274 IODEF Usage Guidance Incident Object Description Exchange Format Usage Guidance A handbook for implementing incident sharing with IODEF v2. RFC 8329 I2NSF framework Framework for Interface to Network Security Functions A standard architecture for configuring network security functions through a unified interface RFC 8358 I-D signatures update Update to Digital Signatures on Internet-Draft Documents How signatures on Internet-Drafts handle non-ASCII text, new file formats and new content types. RFC 8452 AES-GCM-SIV AES-GCM-SIV: Nonce Misuse-Resistant Authenticated Encryption Authenticated encryption that stays safe even if a nonce is accidentally repeated. RFC 8492 TLS-PWD Secure Password Ciphersuites for Transport Layer Security (TLS) Secure TLS authentication using only a password, without certificates. RFC 8576 IoT Security Overview Internet of Things (IoT) Security: State of the Art and Challenges A survey of the threats facing Internet of Things devices, the protocols and guidelines that exist, and the security problems that remain open. RFC 8823 ACME for S/MIME Extensions to Automatic Certificate Management Environment for End-User S/MIME Certificates Automated certificate issuance for email signing and encryption. RFC 9099 IPv6 Ops Security Operational Security Considerations for IPv6 Networks A practical checklist of what changes, and what stays the same, when you secure a managed IPv6 network. RFC 9116 security.txt A File Format to Aid in Security Vulnerability Disclosure A plain text file at a known address that tells researchers how to report a security hole. RFC 9151 CNSA TLS Profile Commercial National Security Algorithm (CNSA) Suite Profile for TLS and DTLS 1.2 and 1.3 NSA's recipe for secure TLS and DTLS configuration using approved algorithms. RFC 9191 Handling Large Certificates and Long Certificate Chains in TLS-Based EAP Methods Why big certificate chains break Wi-Fi and wired logins that use EAP-TLS, and the ways to shrink or work around them. RFC 9215 GOST in X.509 Using GOST R 34.10-2012 and GOST R 34.11-2012 Algorithms with the Internet X.509 Public Key Infrastructure Using Russian cryptographic algorithms in digital certificates. RFC 9227 Using GOST Ciphers in the Encapsulating Security Payload (ESP) and Internet Key Exchange Version 2 (IKEv2) Protocols Four IPsec encryption transforms built on the Russian GOST ciphers Magma and Kuznyechik, with a tree of keys that limits how much each key is used. RFC 9337 GOST Password Keys Generating Password-Based Keys Using the GOST Algorithms How to derive encryption keys from passwords using Russia's national cryptographic algorithms. RFC 9382 SPAKE2 SPAKE2, a Password-Authenticated Key Exchange Password-based key exchange without revealing the password. RFC 9474 RSA blind signatures RSA Blind Signatures Cryptographic signatures that hide the message from the signer. RFC 9505 Censorship techniques A Survey of Worldwide Censorship Techniques A technical survey of how regimes block or impair Internet access RFC 9529 EDHOC traces Traces of Ephemeral Diffie-Hellman Over COSE (EDHOC) Annotated examples of the EDHOC handshake showing every step and intermediate value. RFC 9558 GOST DNSSEC Use of GOST 2012 Signature Algorithms in DNSKEY and RRSIG Resource Records for DNSSEC Securing the Domain Name System with Russian cryptographic standards RFC 9672 OWE Transfer to IEEE Transferring Opportunistic Wireless Encryption to the IEEE 802.11 Working Group Future work on Opportunistic Wireless Encryption moves from the IETF to the IEEE 802.11 Working Group. RFC 9683 TPM Remote Attestation Remote Integrity Verification of Network Devices Containing Trusted Platform Modules How a network operator can check from afar that a router or switch booted the software it was supposed to, using its TPM. RFC 9783 PSA attestation token Arm's Platform Security Architecture (PSA) Attestation Token The exact claims and encoding that an Arm PSA device uses to prove its identity and software state to a remote verifier. RFC 9787 E2E email guidance Guidance on End-to-End Email Security Best practices for implementing secure email with encryption and digital signatures. RFC 9813 RADIUS TLS-PSK Operational Considerations for Using TLS Pre-Shared Keys (TLS-PSKs) with RADIUS Practical rules for replacing RADIUS shared secrets with TLS pre-shared keys without redoing the whole trust model. RFC 9958 PQC for engineers Post-Quantum Cryptography for Engineers What a quantum computer would break, which replacement algorithms exist, and why moving to them is more than swapping a library. RFC 10017 OAuth for browser apps OAuth 2.0 for Browser-Based Applications Which architecture to choose, and which tokens to trust the browser with, when a JavaScript app uses OAuth 2.0. RFC 10027 Cross-device flows Best Current Practice for Security of Cross-Device Flows How attackers trick people into approving logins on a phone for the attacker's TV or laptop, and how to defend against it. RFC 2274 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) How SNMPv3 signs and optionally encrypts management messages using users, shared secrets and a 150-second timeliness window. RFC 2275 SNMP VACM View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP) How an SNMP device decides who may read, write or receive which parts of its management data. RFC 2898 PKCS #5 PKCS #5: Password-Based Cryptography Specification Version 2.0 How to turn a human-chosen password into a cryptographic key, and use it for encryption and message authentication. RFC 5019 Lightweight OCSP The Lightweight Online Certificate Status Protocol (OCSP) Profile for High-Volume Environments A trimmed-down way to run OCSP so that millions of certificate checks can be cached and answered cheaply. RFC 1510 Kerberos V5 The Kerberos Network Authentication Service (V5) How a trusted server proves users are who they say they are without sending passwords over the network. RFC 3281 An Internet Attribute Certificate Profile for Authorization A certificate for saying what someone is allowed to do RFC 3547 GDOI The Group Domain of Interpretation Manage encryption keys for secure group communications and multicast applications. RFC 2078 GSS-API v2 Generic Security Service Application Program Interface, Version 2 A generic programming interface that lets applications get authentication and message protection without caring which security technology sits underneath. RFC 2407 IPsec DOI The Internet IP Security Domain of Interpretation for ISAKMP Defines how ISAKMP negotiates IP security parameters and encryption algorithms. RFC 7613 Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords How to clean up, normalize and compare Unicode usernames and passwords so that look-alike characters do not cause false matches. RFC 2411 IPsec Roadmap IP Security Document Roadmap A guide to organizing new encryption and authentication algorithm documents for IPsec. RFC 4305 IPsec algorithm reqs Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH) Which encryption and authentication algorithms every IPsec ESP and AH implementation must, should or may support. RFC 2437 PKCS#1 v2.0 PKCS #1: RSA Cryptography Specifications Version 2.0 How to use the RSA algorithm properly for encrypting keys and signing messages, including the new OAEP padding. RFC 1508 GSS-API Generic Security Service Application Program Interface A mechanism-independent interface for security services. RFC 1509 GSS-API C bindings Generic Security Service API : C-bindings How to use GSS-API security services from C programs. RFC 2408 ISAKMP Internet Security Association and Key Management Protocol (ISAKMP) Framework for negotiating security agreements and exchanging cryptographic keys. RFC 6402 CMC updates Certificate Management over CMS (CMC) Updates Enhanced controls and attributes for certificate management RFC 9480 CMP updates Certificate Management Protocol (CMP) Updates Modernizing certificate management protocol with better encryption and flexibility. RFC 6407 GDOI The Group Domain of Interpretation Protocol for a group controller to distribute keys to members of a secure group. RFC 8447 IANA Registry Updates for TLS and DTLS A housekeeping pass over the TLS and DTLS IANA registries: looser rules for new entries, a Recommended column and clearer warnings. RFC 1411 Telnet Kerberos Telnet Authentication: Kerberos Version 4 Use Kerberos Version 4 to authenticate users in Telnet sessions. RFC 1412 Telnet SPX Telnet Authentication: SPX Use SPX public-key authentication for Telnet sessions. RFC 1851 ESP Triple DES The ESP Triple DES Transform How IPsec's ESP encrypts packets by running the DES cipher three times in a row with three keys. RFC 2510 CMP Internet X.509 Public Key Infrastructure Certificate Management Protocols How certificate authorities, registration authorities and end entities request, issue, update and revoke X.509 certificates. RFC 2659 S-HTML Security Extensions For HTML Adding S-HTTP security parameters to HTML anchors and documents. RFC 2692 SPKI Requirements SPKI Requirements What the SPKI working group wanted from certificates: permissions first, names second, and as simple as possible. RFC 2773 Encryption using KEA and SKIPJACK How to secure FTP file transfers using KEA authentication and SKIPJACK encryption. RFC 2841 IP-MAC IP Authentication using Keyed SHA1 with Interleaved Padding (IP-MAC) A historic recipe for authenticating IP packets by hashing them with a secret key on both sides, using SHA1. RFC 3029 DVCS Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols A trusted third party that certifies data, timestamps documents, and validates signatures for non-repudiation and archival. RFC 4478 IKEv2 re-auth Repeated Authentication in Internet Key Exchange (IKEv2) Protocol Requires periodic re-authentication to limit unauthorized access duration RFC 4739 IKEv2 multiple auth Multiple Authentication Exchanges in the Internet Key Exchange (IKEv2) Protocol Performing two or more authentication exchanges in sequence during key establishment. RFC 5106 EAP-IKEv2 The Extensible Authentication Protocol-Internet Key Exchange Protocol version 2 (EAP-IKEv2) Method Mutual authentication and session key setup using the VPN handshake protocol. RFC 5296 ERP EAP Extensions for EAP Re-authentication Protocol (ERP) Fast re-authentication for moving devices without repeating the full login. RFC 5327 LTP Security Licklider Transmission Protocol - Security Extensions Authentication and integrity for Licklider Transmission Protocol used in deep-space communication. RFC 5739 IPv6 Configuration in Internet Key Exchange Protocol Version 2 (IKEv2) Assigning IPv6 prefixes to VPN clients via IKEv2. RFC 5924 SIP EKU Extended Key Usage (EKU) for Session Initiation Protocol (SIP) X.509 Certificates A certificate extension that restricts a domain name to use only for SIP. RFC 6210 CMS hash parameters Experiment: Hash Functions with Parameters in the Cryptographic Message Syntax (CMS) and S/MIME An experiment testing parameterized hash functions in email security. RFC 7592 OAuth 2.0 Dynamic Client Registration Management Protocol Methods to manage OAuth 2.0 client registrations throughout their lifetime. RFC 7627 TLS Extended Master Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension Binding the TLS master secret to the full handshake to prevent secret synchronization attacks. RFC 9985 Optimized BFD auth Optimizing Bidirectional Forwarding Detection (BFD) Authentication Spend heavy authentication only on the BFD packets that change something, and use a lighter check for the steady stream of Up packets. RFC 1320 MD4 The MD4 Message-Digest Algorithm A fast message-digest algorithm that computes a 128-bit fingerprint for digital signatures and data integrity. RFC 2313 PKCS #1 v1.5 PKCS #1: RSA Encryption Version 1.5 RSA public-key encryption and signatures, version 1.5 RFC 3709 X.509 Logotypes Internet X.509 Public Key Infrastructure: Logotypes in X.509 Certificates How a certificate can carry a pointer to a logo or sound so people can recognize who it belongs to. RFC 4634 US SHA and HMAC-SHA US Secure Hash Algorithms (SHA and HMAC-SHA) Reference implementations of the US SHA hash functions in C code. RFC 4835 Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and Authentication Header (AH) Specify which encryption and authentication algorithms every IPsec product must support to ensure interoperability. RFC 10015 Deprecate TLS 1.2 kex Deprecating Obsolete Key Exchange Methods in TLS 1.2 and DTLS 1.2 TLS 1.2 and DTLS 1.2 must stop using RSA key exchange and finite-field Diffie-Hellman, and should avoid static ECDH. RFC 1334 PAP/CHAP PPP Authentication Protocols Two methods to verify that the other end of a PPP link is who it claims to be. RFC 2139 RADIUS Accounting RADIUS Accounting Tracking network access server usage with a central accounting server. RFC 1244 Site Security Handbook Site Security Handbook How to create security policies and procedures for networked computer sites. RFC 3268 AES for TLS Advanced Encryption Standard (AES) Ciphersuites for Transport Layer Security (TLS) Stronger encryption options for secure internet connections RFC 4307 IKEv2 algorithms Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2) The encryption and hashing methods all IKEv2 implementations must support. RFC 7507 TLS_FALLBACK_SCSV TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks Preventing protocol downgrade attacks when clients retry with older TLS versions. RFC 2828 Security glossary Internet Security Glossary A comprehensive reference for consistent Internet security terminology RFC 3576 RADIUS Dynamic Auth Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS) Server-initiated commands to disconnect users and update their permissions mid-session. RFC 4051 XML Security URIs Additional XML Security Uniform Resource Identifiers (URIs) Names for cryptographic algorithms and key types in XML signatures and encryption. RFC 8782 DOTS signal channel Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Specification A protocol for requesting DDoS mitigation protection over the network. RFC 2716 EAP-TLS (PPP) PPP EAP TLS Authentication Protocol Mutual authentication and key derivation for PPP dial-up connections using TLS certificates RFC 6931 Additional XML Security Uniform Resource Identifiers (URIs) The official registry of algorithm identifiers for XML security. RFC 3575 RADIUS IANA IANA Considerations for RADIUS (Remote Authentication Dial In User Service) How to assign new numbers in RADIUS authentication and accounting. RFC 2267 Ingress Filtering Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing Make provider edge routers drop packets whose source address could not have come from the network they entered through. RFC 5208 PKCS #8 Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification Version 1.2 Standard format for storing and protecting cryptographic private keys. RFC 972 PWDGEN Password Generator Protocol A network service that generates random, pronounceable passwords for users to choose from. RFC 1352 SNMP Security SNMP Security Protocols Authentication and encryption protocols for secure network management. RFC 1472 PPP security MIB The Definitions of Managed Objects for the Security Protocols of the Point-to-Point Protocol SNMP objects for configuring PPP authentication, including the stored identities and secrets, and why they must be locked down. RFC 1961 SOCKS5 GSS-API GSS-API Authentication Method for SOCKS Version 5 How a SOCKS version 5 client and server prove who they are and protect traffic using GSS-API. RFC 2420 PPP 3DES The PPP Triple-DES Encryption Protocol (3DESE) How to encrypt PPP packets with Triple-DES in CBC mode, negotiated through the PPP Encryption Control Protocol. RFC 2485 DHCP Option for The Open Group's User Authentication Protocol DHCP option that delivers User Authentication Protocol server addresses RFC 2857 HMAC-RIPEMD-160-96 The Use of HMAC-RIPEMD-160-96 within ESP and AH How to use HMAC with the RIPEMD-160 hash to authenticate IPsec packets, with a 96-bit tag and a 160-bit key. RFC 2942 Telnet Kerberos 5 Telnet Authentication: Kerberos Version 5 How a Telnet client and server prove who they are to each other using Kerberos Version 5 tickets. RFC 2943 Telnet DSA TELNET Authentication Using DSA How a Telnet client proves who it is, and optionally checks the server, using DSA digital signatures and certificates. RFC 2944 Telnet SRP Telnet Authentication: SRP How Telnet uses the Secure Remote Password protocol so a user can log in without sending a password. RFC 2949 Telnet CAST-128 OFB Telnet Encryption: CAST-128 64 bit Output Feedback Uses CAST-128 encryption in output feedback mode to secure Telnet RFC 2950 Telnet CAST-128 CFB Telnet Encryption: CAST-128 64 bit Cipher Feedback Uses CAST-128 encryption in cipher feedback mode to secure Telnet RFC 2984 CAST-128 in CMS Use of the CAST-128 Encryption Algorithm in CMS How to plug the CAST-128 cipher into S/MIME's Cryptographic Message Syntax for content and key encryption. RFC 3185 CMS Key Reuse Reuse of CMS Content Encryption Keys A small trick for reusing one message's encryption key to protect the next message, without another expensive key exchange. RFC 3456 DHCP for IPsec tunnels Dynamic Host Configuration Protocol (DHCPv4) Configuration of IPsec Tunnel Mode How a remote host gets a corporate address through an IPsec tunnel by reusing ordinary DHCPv4. RFC 3594 PacketCable Security Ticket Control Sub-Option for the DHCP CableLabs Client Configuration (CCC) Option A DHCP sub-option that lets a cable provider tell a device to throw away its saved security tickets. RFC 4196 SEED in IPsec The SEED Cipher Algorithm and Its Use with IPsec How to encrypt IPsec ESP traffic with the SEED block cipher in CBC mode with a fresh random IV in every packet. RFC 4304 IPsec ESN DOI Extended Sequence Number (ESN) Addendum to IPsec Domain of Interpretation (DOI) for Internet Security Association and Key Management Protocol (ISAKMP) How two IPsec peers agree, during ISAKMP/IKE negotiation, to use 64-bit extended sequence numbers. RFC 4335 SSH Break The Secure Shell (SSH) Session Channel Break Extension How an SSH client asks the remote side to send a serial BREAK signal, as Telnet consoles already could. RFC 4442 TESLA bootstrapping Bootstrapping Timed Efficient Stream Loss-Tolerant Authentication (TESLA) How a receiver gets the starting settings and first key for TESLA multicast authentication, carried inside MIKEY. RFC 4476 AC policies ext Attribute Certificate (AC) Policies Extension A certificate extension that says which policies an attribute certificate was issued under. RFC 4494 AES-CMAC-96 for IPsec The AES-CMAC-96 Algorithm and Its Use with IPsec How to use the AES block cipher to stamp IPsec packets with a 96-bit authentication tag. RFC 4557 OCSP for PKINIT Online Certificate Status Protocol (OCSP) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Lets Kerberos clients and servers carry fresh certificate status answers inside PKINIT login messages. RFC 4675 RADIUS VLAN attributes RADIUS Attributes for Virtual LAN and Priority Support Four new RADIUS attributes that let an authentication server hand out VLAN memberships and priority mappings per port. RFC 4683 X.509 SIM Internet X.509 Public Key Infrastructure Subject Identification Method (SIM) A way to put a hashed, password-protected personal identifier in a certificate so only the owner can reveal it. RFC 4806 OCSP Extensions to IKEv2 Online Certificate Status Protocol (OCSP) Extensions to IKEv2 How IKEv2 peers can swap a small OCSP answer instead of a huge revocation list to prove a certificate is still good. RFC 4849 NAS-Filter-Rule RADIUS Filter Rule Attribute A RADIUS attribute that carries actual packet filter rules to an access server instead of just naming a preconfigured filter. RFC 4945 The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX Pins down how IKE and IPsec should use X.509 certificates, so that implementations make the same choices and interoperate. RFC 5324 FC-SP MIB MIB for Fibre-Channel Security Protocols (FC-SP) Five SNMP MIB modules that let a network manager monitor and configure the security features of Fibre Channel storage networks. RFC 5529 Camellia for IPsec Modes of Operation for Camellia for Use with IPsec How the Camellia cipher plugs into IPsec as an optional alternative, in CBC, CTR and CCM modes. RFC 5588 GSS-API store cred Generic Security Service Application Program Interface (GSS-API) Extension for Storing Delegated Credentials A GSS-API function that saves delegated credentials into the normal credential store so ordinary calls can use them. RFC 5619 Softwire security Softwire Security Analysis and Requirements Which attacks threaten softwire tunnels, and which protections, mostly IPsec, an implementation has to provide. RFC 5660 IPsec latching IPsec Channels: Connection Latching Tying a connection to the exact IPsec peer and protection it started with, and alerting the application if that changes. RFC 5807 PANA Master Key Definition of Master Key between PANA Client and Enforcement Point How a PANA client and a network gatekeeper get a shared key, derived from the EAP session key, that no other gatekeeper shares. RFC 5913 Clearance Attribute and Authority Clearance Constraints Certificate Extension How X.509 certificates carry security clearances and how authorities can cap the clearances they vouch for. RFC 5940 Additional Cryptographic Message Syntax (CMS) Revocation Information Choices Lets a CMS message carry OCSP and SCVP answers about revoked certificates, not just CRLs. RFC 6065 Using Authentication, Authorization, and Accounting Services to Dynamically Provision View-Based Access Control Model User-to-Group Mappings Lets a central login server decide which SNMP access group each user belongs to, so devices need no manual updates. RFC 6239 Suite B for SSH Suite B Cryptographic Suites for Secure Shell (SSH) Using US government cryptography standards with the Secure Shell protocol. RFC 6339 Context Token Encapsulate/Decapsulate and OID Comparison Functions for the Generic Security Service Application Program Interface (GSS-API) Three small GSS-API functions for adding and removing the standard token header and for comparing OIDs. RFC 6403 Suite B CMC Suite B Profile of Certificate Management over CMS How to manage certificates using Suite B cryptography. RFC 6448 Unencrypted KRB-CRED The Unencrypted Form of Kerberos 5 KRB-CRED Message A formal way to send Kerberos credentials in a KRB-CRED message with no extra encryption, over a protected transport. RFC 6476 CMS MAC encryption Using Message Authentication Code (MAC) Encryption in the Cryptographic Message Syntax (CMS) How to encrypt a CMS message and protect it with a MAC, using two keys derived from one master secret. RFC 6595 SAML SASL Mechanism A Simple Authentication and Security Layer (SASL) and GSS-API Mechanism for the Security Assertion Markup Language (SAML) How mail, chat and other non-web apps can log users in through a SAML identity provider, using SASL. RFC 6616 OpenID for SASL/GSS-API A Simple Authentication and Security Layer (SASL) and Generic Security Service Application Program Interface (GSS-API) Mechanism for OpenID How a mail client can log in with an OpenID by handing the web part of the login to a browser. RFC 6630 ERP/AAK EAP Re-authentication Protocol Extensions for Authenticated Anticipatory Keying (ERP/AAK) How a device can get Wi-Fi or mobile keys prepared at the next access point before it arrives there. RFC 6668 SHA-2 for SSH SHA-2 Data Integrity Verification for the Secure Shell (SSH) Transport Layer Protocol Adds two SHA-2 based HMAC algorithms for checking that SSH messages were not altered. RFC 6738 Diameter IKEv2 SK Diameter IKEv2 SK: Using Shared Keys to Support Interaction between IKEv2 Servers and Diameter Servers How an IKEv2 server asks a Diameter server for the shared key it needs to authenticate a peer. RFC 6784 Kerberos DHCPv6 options Kerberos Options for DHCPv6 Four DHCPv6 options that tell a client which Kerberos realm and key servers to use. RFC 6786 Encrypting PANA AVPs Encrypting the Protocol for Carrying Authentication for Network Access (PANA) Attribute-Value Pairs How PANA lets selected attribute-value pairs travel encrypted instead of in the clear. RFC 6806 Kerberos referrals Kerberos Principal Name Canonicalization and Cross-Realm Referrals How a Kerberos KDC can point clients to the right realm, so clients need far less realm configuration. RFC 6880 An Information Model for Kerberos Version 5 A neutral list of what a Kerberos ticket server stores, so that it can be administered the same way everywhere. RFC 6942 Diameter ERP Diameter Support for the EAP Re-authentication Protocol (ERP) How Diameter carries fast EAP re-authentication between an access network and a re-authentication server. RFC 7056 Name Attributes for the GSS-API Extensible Authentication Protocol (EAP) Mechanism How applications read RADIUS and SAML attributes about an authenticated user through GSS-API name attributes. RFC 7192 Algorithms for Cryptographic Message Syntax (CMS) Key Package Receipt and Error Content Types Which signature, key-transport and encryption algorithms to support when protecting CMS key package receipts and errors. RFC 7685 TLS Padding A Transport Layer Security (TLS) ClientHello Padding Extension A TLS extension that pads the ClientHello to a size that avoids buggy server implementations. RFC 7773 Authentication Context Certificate Extension A certificate extension that records how the issuer authenticated the subject, with a SAML-based format. RFC 7791 IKEv2 SA Cloning Cloning the IKE Security Association in the Internet Key Exchange Protocol Version 2 (IKEv2) Spawn extra IKEv2 tunnels from one authenticated session, with no second login. RFC 7797 JWS Unencoded Payload JSON Web Signature (JWS) Unencoded Payload Option A header switch that lets a JWS sign the raw payload instead of its base64url-encoded form. RFC 7894 Alternative Challenge Password Attributes for Enrollment over Secure Transport Gives one-time passwords, revocation passwords and EST identity linking their own certificate request attributes. RFC 8031 Curve25519 and Curve448 for the Internet Key Exchange Protocol Version 2 (IKEv2) Key Agreement Two modern elliptic curves, Curve25519 and Curve448, become key exchange groups for IKEv2 VPN negotiation. RFC 8045 RADIUS Extensions for IP Port Configuration and Reporting Three RADIUS attributes that let a server limit, report and pre-set the transport ports a shared-address device gives each user. RFC 8103 ChaCha20-Poly1305 in CMS Using ChaCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Syntax (CMS) How to use the ChaCha20-Poly1305 authenticated cipher inside CMS authenticated-enveloped data. RFC 8129 Kerberos Auth Indicator Authentication Indicator in Kerberos Tickets A Kerberos ticket field that tells services how strongly the client was authenticated. RFC 8176 AMR Values Authentication Method Reference Values A shared vocabulary and registry for saying how a user proved who they are inside a JSON Web Token. RFC 8263 GDOI GROUPKEY-PUSH Ack Group Domain of Interpretation (GDOI) GROUPKEY-PUSH Acknowledgement Message How a group member tells a GDOI key server that it received and applied a rekey message. RFC 8322 ROLIE Resource-Oriented Lightweight Information Exchange (ROLIE) A web-style way to publish, find and share security automation data, built on the Atom feed formats. RFC 8412 SWIMA Software Inventory Message and Attributes (SWIMA) for PA-TNC How an endpoint tells a network server which software is installed, and keeps that list up to date as it changes. RFC 8418 X25519 CMS Use of the Elliptic Curve Diffie-Hellman Key Agreement Algorithm with X25519 and X448 in the Cryptographic Message Syntax (CMS) How secure messages can use the fast X25519 and X448 curves to agree on a key for each recipient. RFC 8420 EdDSA in IKEv2 Using the Edwards-Curve Digital Signature Algorithm (EdDSA) in the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 peers signal and use EdDSA signatures, which need no separate hashing step. RFC 8442 ECDHE_PSK with AES-GCM and AES-CCM Cipher Suites for TLS 1.2 and DTLS 1.2 Four TLS 1.2 and DTLS 1.2 cipher suites that pair a pre-shared key with ephemeral elliptic-curve key exchange and AEAD encryption. RFC 8485 Vectors of Trust Vectors of Trust A compact way for an identity provider to tell a relying party how a login was proofed, authenticated and delivered. RFC 8600 XMPP for Security Info Using Extensible Messaging and Presence Protocol (XMPP) for Security Information Exchange Using XMPP publish-subscribe as a broker for sharing security incident reports among security systems and response teams. RFC 8696 PSK in CMS Using Pre-Shared Key (PSK) in the Cryptographic Message Syntax (CMS) Mixing a pre-shared key into CMS key management so that stored messages stay safe from a future quantum computer. RFC 8812 COSE for WebAuthn CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms Registers the RSA and secp256k1 signature algorithms that WebAuthn and FIDO2 need in the COSE and JOSE registries. RFC 8817 TSVCIS RTP payload RTP Payload Format for Tactical Secure Voice Cryptographic Interoperability Specification (TSVCIS) Codec How to put TSVCIS tactical voice frames, built on the MELPe vocoder, into RTP packets. RFC 8898 SIP bearer tokens Third-Party Token-Based Authentication and Authorization for Session Initiation Protocol (SIP) How a SIP phone can prove who it is with an OAuth access token from a third party instead of a password. RFC 8983 IKEv2 IPv4/IPv6 Internet Key Exchange Protocol Version 2 (IKEv2) Notification Status Types for IPv4/IPv6 Coexistence New IKEv2 notifications let a VPN responder tell the initiator which of IPv4 and IPv6 it will hand out. RFC 9066 DOTS Call Home Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Call Home How a network that hosts attack sources can call its provider back, so outbound DDoS traffic is blocked near where it starts. RFC 9133 DOTS Filtering Control Controlling Filtering Rules Using Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Lets a DDoS victim switch prepared filtering rules on or off through the DOTS signal channel mid-attack. RFC 9149 TLS Ticket Requests TLS Ticket Requests A TLS extension that lets a client tell the server how many session tickets it wants. RFC 9261 Exported Authenticators Exported Authenticators in TLS Prove you own a certificate on an existing TLS connection, at any time after the handshake, without changing TLS itself. RFC 9310 X.509 5G NF Types X.509 Certificate Extension for 5G Network Function Types A certificate extension that lists which 5G network function types a certificate holder serves. RFC 9335 Cryptex Completely Encrypting RTP Header Extensions and Contributing Sources Cryptex encrypts RTP header extensions and contributing sources that SRTP leaves in the clear. RFC 9362 DOTS Robust Block Distributed Denial-of-Service Open Threat Signaling (DOTS) Signal Channel Configuration Attributes for Robust Block Transmission Lets DOTS peers negotiate the tuning knobs for sending big messages quickly while a DDoS attack drops packets. RFC 9431 ACE MQTT TLS Profile Message Queuing Telemetry Transport (MQTT) and Transport Layer Security (TLS) Profile of Authentication and Authorization for Constrained Environments (ACE) Framework How an MQTT broker can check, with ACE access tokens, who may publish and subscribe to which topics. RFC 9444 ACME for subdomains Automated Certificate Management Environment (ACME) for Subdomains How an ACME client can prove control of a parent domain and get certificates for subdomains under it. RFC 9464 IKEv2 encrypted DNS Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS How a VPN server tells a connecting client which encrypted DNS resolvers to use, and how to trust them. RFC 9470 OAuth step-up auth OAuth 2.0 Step Up Authentication Challenge Protocol How an API can tell a client 'that login is not strong or fresh enough', and how the client asks for a better one. RFC 9478 Labeled IPsec IKEv2 Labeled IPsec Traffic Selector Support for the Internet Key Exchange Protocol Version 2 (IKEv2) A new IKEv2 Traffic Selector type that lets two IPsec peers agree on a Mandatory Access Control security label for a tunnel. RFC 9495 CAA for email Certification Authority Authorization (CAA) Processing for Email Addresses A DNS record tag that lets a domain say which certificate authorities may issue email certificates for it. RFC 9538 CDNI ACME delegation Content Delivery Network Interconnection (CDNI) Delegation Using the Automated Certificate Management Environment How one CDN tells another it may get HTTPS certificates for a customer's domain without ever handing over private keys. RFC 9540 Oblivious SVCB Discovery of Oblivious Services via Service Binding Records A DNS parameter that tells clients a service can be reached with Oblivious HTTP, and where to find its keys. RFC 9588 Kerberos SPAKE Kerberos Simple Password-Authenticated Key Exchange (SPAKE) Pre-authentication A Kerberos login step that stops attackers from guessing your password offline, and can carry a second factor safely. RFC 9593 IKEv2 auth methods Announcing Supported Authentication Methods in the Internet Key Exchange Protocol Version 2 (IKEv2) How IKEv2 peers tell each other which authentication methods they support, before they pick one. RFC 9594 ACE group keying Key Provisioning for Group Communication Using Authentication and Authorization for Constrained Environments (ACE) How small devices get approved for a secure group and receive the group's keys from a Key Distribution Center. RFC 9605 SFrame Secure Frame (SFrame): Lightweight Authenticated Encryption for Real-Time Media End-to-end encryption for group video calls, built so a middle server can still forward media without seeing it. RFC 9608 No revocation X.509 No Revocation Available for X.509 Public Key Certificates A certificate extension that tells relying parties the CA publishes no revocation information, so they can skip revocation checks. RFC 9611 IKEv2 per-resource SAs Internet Key Exchange Protocol Version 2 (IKEv2) Support for Per-Resource Child Security Associations (SAs) How two IPsec peers can set up several identical tunnels, one per CPU or queue, to get past the single-core speed limit. RFC 9618 X.509 policy validation Updates to X.509 Policy Validation A fix for X.509 policy validation that stops a small certificate chain from blowing up a validator's memory and time. RFC 9668 EDHOC with CoAP Using Ephemeral Diffie-Hellman Over COSE (EDHOC) with the Constrained Application Protocol (CoAP) and Object Security for Constrained RESTful Environments (OSCORE) How two tiny devices set up OSCORE keys with EDHOC over CoAP, and how to squeeze that into two round trips. RFC 9688 SHA3 in CMS Use of the SHA3 One-Way Hash Functions in the Cryptographic Message Syntax (CMS) How to name and use the four SHA3 hash functions for signatures, MACs and key derivation in CMS messages. RFC 9701 JWT Token Introspection JSON Web Token (JWT) Response for OAuth Token Introspection How an OAuth authorization server can answer token introspection with a signed, optionally encrypted JWT. RFC 9709 CMS HKDF-SHA256 Encryption Key Derivation in the Cryptographic Message Syntax (CMS) Using HKDF with SHA-256 Mixing the algorithm identifier into the CMS encryption key so an attacker cannot swap the cipher and read the message. RFC 9728 OAuth PR Metadata OAuth 2.0 Protected Resource Metadata A standard JSON document that tells OAuth clients how a protected API works and which authorization server to use. RFC 9734 EKU for IM URIs X.509 Certificate Extended Key Usage (EKU) for Instant Messaging URIs A certificate key purpose that marks a certificate as meant for proving instant messaging identity. RFC 9761 MUD TLS profiles Manufacturer Usage Description (MUD) for TLS and DTLS Profiles for Internet of Things (IoT) Devices Lets IoT makers publish the TLS and DTLS behavior their devices should show, so networks can spot impostors. RFC 9767 GNAP RS connections Grant Negotiation and Authorization Protocol Resource Server Connections How a GNAP authorization server and the resource servers it protects can talk to each other about access tokens. RFC 9770 ACE token revocation Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework How an ACE authorization server tells constrained devices that an access token was revoked before it expired. RFC 9773 ACME renewal information ACME Renewal Information (ARI) Extension Lets a certificate authority tell ACME clients when to renew, smoothing load and speeding up emergency replacements. RFC 9782 EAT media types Entity Attestation Token (EAT) Media Types Six registered media types that label Entity Attestation Tokens when they travel over HTTP, CoAP and similar protocols. RFC 9799 ACME for .onion Automated Certificate Management Environment (ACME) Extensions for ".onion" Special-Use Domain Names How ACME can issue TLS certificates to Tor .onion services, which are not in the DNS. RFC 9809 EKU for updates X.509 Certificate Extended Key Usage (EKU) for Configuration, Updates, and Safety-Critical Communication Four new certificate labels that say a key may sign configs, trust anchors, updates, or secure safety-critical links. RFC 9820 CoAP-EAP Authentication Service Based on the Extensible Authentication Protocol (EAP) for Use with the Constrained Application Protocol (CoAP) Carrying EAP authentication over CoAP so constrained IoT devices can join a domain and get OSCORE keys. RFC 2058 RADIUS Remote Authentication Dial In User Service (RADIUS) Central authentication server for dial-in networks and access control. RFC 2264 SNMPv3 USM User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) Authenticating and encrypting SNMPv3 messages with user identities, keys, and replay protection. RFC 2478 SPNEGO The Simple and Protected GSS-API Negotiation Mechanism Letting two programs find a security method they both understand, without prior agreement. RFC 2875 DH proof-of-possession Diffie-Hellman Proof-of-Possession Algorithms Proving possession of a Diffie-Hellman private key without using it for signing. RFC 3075 XML-Signature XML-Signature Syntax and Processing Syntax and processing rules for digital signatures over XML and other data, wherever the data lives. RFC 3211 CMS Passwords Password-based Encryption for CMS A fourth way to wrap a message's encryption key in CMS: derive a key-encryption key from a password. RFC 8398 Intl email in X.509 Internationalized Email Addresses in X.509 Certificates Support for email addresses with non-ASCII characters in digital certificates. RFC 1991 PGP Message Format PGP Message Exchange Formats The packet-based structure for encrypted and signed messages RFC 7539 ChaCha20-Poly1305 ChaCha20 and Poly1305 for IETF Protocols A modern stream cipher and authenticator for IETF protocols. RFC 6962 Certificate Transparency Certificate Transparency Public audit logs for TLS certificates to detect misissued certificates. RFC 7321 Cryptographic Algorithm Implementation Requirements and Usage Guidance for Encapsulating Security Payload (ESP) and Authentication Header (AH) Choose strong encryption algorithms for IPsec protocols RFC 1319 MD2 The MD2 Message-Digest Algorithm A cryptographic hash function that compresses any message into a 128-bit fingerprint. RFC 6649 Deprecate DES, RC4-HMAC-EXP, and Other Weak Cryptographic Algorithms in Kerberos Retire weak encryption in Kerberos before it becomes a liability. RFC 2314 PKCS #10 v1.5 PKCS #10: Certification Request Syntax Version 1.5 The format for requesting a digital certificate from a certificate authority. RFC 3126 Electronic Signature Formats for long term electronic signatures A format for digital signatures that remain valid and provable over many years, protecting against repudiation. RFC 5469 TLS DES/IDEA DES and IDEA Cipher Suites for Transport Layer Security (TLS) Why two old encryption methods were removed from TLS 1.2 and should no longer be used. RFC 3682 GTSM The Generalized TTL Security Mechanism (GTSM) Using the packet hop count to prevent attacks on routing protocols from distant sources. RFC 4843 ORCHID An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers (ORCHID) IPv6-like identifiers derived from cryptographic hashes for endpoint identification. RFC 1938 One-Time Password System A One-Time Password System Use a different password for each login, defeating eavesdroppers who capture network traffic. RFC 2587 PKIX LDAPv2 Schema Internet X.509 Public Key Infrastructure LDAPv2 Schema How to organize and store X.509 digital certificates in an LDAP directory. RFC 2797 CMC Certificate Management Messages over CMS A protocol for requesting and managing public key certificates using standard cryptographic messages. RFC 2831 DIGEST-MD5 SASL Using Digest Authentication as a SASL Mechanism Using digest authentication (like HTTP) as a general authentication mechanism for any protocol. RFC 2853 GSS-API Java Generic Security Service API Version 2 : Java Bindings How Java programs use cryptographic security services RFC 3546 TLS Extensions Transport Layer Security (TLS) Extensions Extensible mechanisms for TLS handshake messages and six specific extensions for constrained clients. RFC 3664 AES-XCBC-PRF-128 The AES-XCBC-PRF-128 Algorithm for the Internet Key Exchange Protocol (IKE) Using AES to generate pseudo-random key material for IPsec key exchange. RFC 4507 TLS session tickets Transport Layer Security (TLS) Session Resumption without Server-Side State Lets servers avoid keeping TLS session state with client-held tickets. RFC 6277 OCSP algorithm agility Online Certificate Status Protocol Algorithm Agility Letting OCSP clients and servers agree on signature algorithms for certificate status responses. RFC 6844 DNS CAA DNS Certification Authority Authorization (CAA) Resource Record DNS records that list which certification authorities may issue certificates for a domain RFC 9847 TLS/DTLS IANA registries IANA Registry Updates for TLS and DTLS Adding a way to mark discouraged cryptographic options in TLS registry tables. RFC 1445 SNMPv2 admin model Administrative Model for version 2 of the Simple Network Management Protocol (SNMPv2) Security and access control framework for SNMPv2 network management. RFC 5653 GSS-API Java bindings Generic Security Service API Version 2: Java Bindings Update Java language bindings for GSS-API security services RFC 3278 Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS) Using short but strong elliptic curve keys to sign and encrypt messages. RFC 4009 SEED The SEED Encryption Algorithm A 128-bit block cipher widely used for encryption in South Korea. RFC 4753 ECP groups for IKE ECP Groups For IKE and IKEv2 Three elliptic curve groups for secure key exchange in IKE and IKEv2. RFC 6112 Kerberos Anonymity Anonymity Support for Kerberos Proving your credentials without revealing who you are. RFC 2511 CRMF Internet X.509 Certificate Request Message Format Standard format for asking a certification authority to issue an X.509 certificate. RFC 4590 RADIUS Digest RADIUS Extension for Digest Authentication Let a RADIUS server verify HTTP Digest passwords for SIP and HTTP. RFC 6170 Certificate Image Internet X.509 Public Key Infrastructure -- Certificate Image Attaching visual representations to X.509 certificates. RFC 8229 IKE over TCP TCP Encapsulation of IKE and IPsec Packets Send IKE and IPsec packets through TCP when UDP is blocked by middleboxes. RFC 8399 RFC 5280 i18n Internationalization Updates to RFC 5280 Updates to X.509 certificates for internationalized domain names and email addresses. RFC 8954 OCSP Nonce Online Certificate Status Protocol (OCSP) Nonce Extension Defines secure length limits for the nonce extension to prevent replay attacks. RFC 6253 HIP certificates Host Identity Protocol Certificates Carrying and representing certificates in the Host Identity Protocol RFC 7298 Babel Hashed Message Authentication Code (HMAC) Cryptographic Authentication Adding optional cryptographic authentication to Babel routing protocol messages. RFC 8773 TLS 1.3 cert + ext PSK TLS 1.3 Extension for Certificate-Based Authentication with an External Pre-Shared Key Combine a certificate and secret key in TLS 1.3 to protect against quantum threats RFC 9579 PBMAC1 in PKCS #12 Use of Password-Based Message Authentication Code 1 (PBMAC1) in PKCS #12 Syntax Using modern key derivation with password-based integrity protection in PKCS #12 files. RFC 9908 EST CSR attributes Clarification and Enhancement of the CSR Attributes Definition in RFC 7030 How an EST server can tell a client exactly which fields and values its certificate request must contain. RFC 2559 PKIX LDAPv2 Internet X.509 Public Key Infrastructure Operational Protocols - LDAPv2 Using the lightweight directory protocol to retrieve and manage X.509 certificates RFC 5872 PANA IANA Rules IANA Rules for the Protocol for Carrying Authentication for Network Access (PANA) Relaxed registration rules for the network access authentication protocol. RFC 9519 SSH IANA registry policy Update to the IANA SSH Protocol Parameters Registry Requirements SSH's IANA registries move from needing an RFC to needing a quick sign-off from designated experts. RFC 1186 MD4 MD4 Message Digest Algorithm A fast 128-bit cryptographic message digest algorithm for signing and checksums. RFC 1416 Telnet auth Telnet Authentication Option A way to prove your identity over Telnet without sending passwords in the clear RFC 1969 PPP DES Encryption The PPP DES Encryption Protocol (DESE) Encrypting point-to-point links using the DES algorithm RFC 2527 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework A checklist for writing rules about how digital certificates are issued and managed. RFC 4909 Multimedia Internet KEYing (MIKEY) General Extension Payload for Open Mobile Alliance BCAST LTKM/STKM Transport Extend MIKEY to carry broadcast TV key management parameters for mobile devices. RFC 5581 Camellia in OpenPGP The Camellia Cipher in OpenPGP How to use the Camellia encryption cipher in OpenPGP RFC 5849 OAuth 1.0 The OAuth 1.0 Protocol Delegated access to protected resources without sharing passwords. RFC 6045 RID Real-time Inter-network Defense (RID) A messaging system that lets network providers trace attacks upstream and ask each other to stop them, in near real time. RFC 6046 RID Transport of Real-time Inter-network Defense (RID) Messages How Real-time Inter-network Defense messages travel between security teams: plain HTTP POSTs over mutually authenticated TLS. RFC 8429 Deprecate Triple-DES (3DES) and RC4 in Kerberos Moving Kerberos away from weakening encryption methods for authentication security. RFC 2618 RADIUS Client MIB RADIUS Authentication Client MIB Monitoring system objects for RADIUS authentication clients. RFC 2619 RADIUS Server MIB RADIUS Authentication Server MIB Monitoring system objects for RADIUS authentication servers. RFC 3039 Internet X.509 Public Key Infrastructure Qualified Certificates Profile Standard digital ID certificates for legally-significant signatures and identification. RFC 3770 Certificate Extensions and Attributes Supporting Authentication in Point-to-Point Protocol (PPP) and Wireless Local Area Networks (WLAN) Marking certificates as safe for wireless and dial-up authentication. RFC 4132 Camellia in TLS Addition of Camellia Cipher Suites to Transport Layer Security (TLS) Adding a fast block cipher option for encrypting TLS traffic. RFC 4325 AIA CRL extension Internet X.509 Public Key Infrastructure Authority Information Access Certificate Revocation List (CRL) Extension Helping applications find CRL issuer certificates for certificate revocation checking. RFC 4630 DirectoryString update Update to DirectoryString Processing in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile Fixing how text is encoded in digital certificates and revocation lists RFC 5990 RSA-KEM Use of the RSA-KEM Key Transport Algorithm in the Cryptographic Message Syntax (CMS) A secure one-pass method to transport encryption keys using RSA public keys. RFC 6637 ECC in OpenPGP Elliptic Curve Cryptography (ECC) in OpenPGP Smaller, faster cryptographic keys for secure emails and messages. RFC 6961 The Transport Layer Security (TLS) Multiple Certificate Status Request Extension Bringing fresh certificate status checks into the TLS handshake. RFC 7630 HMAC-SHA-2 for SNMPv3 HMAC-SHA-2 Authentication Protocols in the User-based Security Model (USM) for SNMPv3 Stronger hash-based authentication for network management messages using SHA-2 instead of older hashes. RFC 8708 HSS/LMS in CMS Use of the HSS/LMS Hash-Based Signature Algorithm in the Cryptographic Message Syntax (CMS) Hash-based digital signatures in cryptographic messages using HSS/LMS. RFC 931 Authentication server Authentication server A protocol to identify the user behind a TCP connection. RFC 1852 AH with Keyed SHA IP Authentication using Keyed SHA Using SHA hashing to authenticate IP packets with a secret key. RFC 4853 Cryptographic Message Syntax (CMS) Multiple Signer Clarification Clarifies how to handle multiple digital signatures in signed messages RFC 5554 GSS-API channel bindings Clarifications and Extensions to the Generic Security Service Application Program Interface (GSS-API) for the Use of Channel Bindings Defines how to tie authentication to a specific secure channel RFC 9395 Deprecate IKEv1 Deprecation of the Internet Key Exchange Version 1 (IKEv1) Protocol and Obsoleted Algorithms IKEv1 is retired for good, and a batch of old, unused algorithms are marked deprecated in the IKEv2 registries. RFC 1170 Public Key Licensing Public key standards and licenses Public Key Partners' statement on patent licensing for cryptography RFC 1457 Security Label Framework for the Internet A framework for attaching security labels to network data RFC 1492 TACACS An Access Control Protocol, Sometimes Called TACACS A protocol for delegating authentication decisions to a central server RFC 1751 Readable 128-bit keys A Convention for Human-Readable 128-bit Keys Use six simple English words instead of a 64-bit hex string, and twelve words for a 128-bit key. RFC 1805 Location-Independent Data/Software Integrity Protocol A protocol for proving files have not been tampered with, no matter where they come from. RFC 1824 TESS The Exponential Security System TESS: An Identity-Based Cryptographic Protocol for Authenticated Key-Exchange (E.I.S.S.-Report 1995/4) An identity-based cryptographic system for authenticated key exchange using discrete exponentiation RFC 1875 UNINETT PCA Policy UNINETT PCA Policy Statements Operating rules for a Norwegian certificate authority RFC 2084 Web Transaction Security Considerations for Web Transaction Security Requirements for securing HTTP with confidentiality, integrity, and authentication. RFC 2179 Network Security For Trade Shows Practical security checklist for vendors exhibiting at network trade shows. RFC 2323 IETF Security Guidelines IETF Identification and Security Guidelines A humorous look at identification problems at IETF meetings. RFC 2479 IDUP-GSS-API Independent Data Unit Protection Generic Security Service Application Program Interface (IDUP-GSS-API) Protecting single messages or files with cryptography independent of any connection. RFC 2612 CAST-256 The CAST-256 Encryption Algorithm A 128-bit block cipher with variable key sizes from 128 to 256 bits. RFC 2628 Crypto API Simple Cryptographic Program Interface (Crypto API) A simple programming interface to cryptographic functions, separating crypto libraries from applications. RFC 2695 ONC RPC Authentication Authentication Mechanisms for ONC RPC Two secure ways to prove identity between programs over a network. RFC 2807 XML-DSig requirements XML Signature Requirements Requirements for digitally signing and authenticating XML content RFC 2808 SecurID SASL The SecurID(r) SASL Mechanism Using SecurID tokens for authentication in SASL-enabled protocols RFC 2876 KEA and SKIPJACK in CMS Use of the KEA and SKIPJACK Algorithms in CMS Conventions for using two government-designed cryptographic algorithms with the Cryptographic Message Syntax. RFC 2888 L2TP with IPsec Secure Remote Access with L2TP Secure dial-in from the Internet using L2TP tunneling and IPsec encryption RFC 2951 Telnet KEA/SKIPJACK TELNET Authentication Using KEA and SKIPJACK Secure Telnet authentication and encryption using government algorithms RFC 2952 Telnet DES CFB Telnet Encryption: DES 64 bit Cipher Feedback DES encryption in cipher feedback mode for Telnet. RFC 2953 Telnet DES OFB Telnet Encryption: DES 64 bit Output Feedback Encrypting Telnet sessions using DES in a streaming mode. RFC 2994 MISTY1 A Description of the MISTY1 Encryption Algorithm A block cipher algorithm with provable security against cryptanalysis. RFC 3058 IDEA in CMS Use of the IDEA Encryption Algorithm in CMS Adding IDEA encryption to secure email and messages RFC 3067 IODEF Requirements TERENA'S Incident Object Description and Exchange Format Requirements High-level requirements for a standard incident data exchange format between security teams. RFC 3079 Deriving Keys for use with Microsoft Point-to-Point Encryption (MPPE) How to derive encryption keys from passwords for Microsoft Point-to-Point Encryption RFC 3244 Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols Windows 2000 protocols for Kerberos password changes and administrative password setting. RFC 3607 Chinese Lottery Cryptanalysis Revisited: The Internet as a Codebreaking Tool How internet worms could crack encryption by brute force RFC 3628 Policy Requirements for Time-Stamping Authorities (TSAs) Security and operational rules for trusted services that sign digital timestamps RFC 3653 XPath Filter 2.0 XML-Signature XPath Filter 2.0 A more efficient way to sign parts of an XML document RFC 3702 Authentication, Authorization, and Accounting Requirements for the Session Initiation Protocol (SIP) What SIP networks must do to check who you are, whether you can call, and what to bill RFC 3706 DPD A Traffic-Based Method of Detecting Dead Internet Key Exchange (IKE) Peers Telling when a secure tunnel peer has died without sending constant heartbeat messages RFC 3792 Survey of IPv4 Addresses in Currently Deployed IETF Security Area Standards Track and Experimental Documents A catalog of IPv4 address dependencies in security standards. RFC 3881 Healthcare Audit XML Security Audit and Access Accountability Message XML Data Definitions for Healthcare Applications Standard XML format for recording who accessed patient data and when. RFC 3884 IPsec for Routing Use of IPsec Transport Mode for Dynamic Routing How to secure routing exchanges between gateways without confusing network routing. RFC 3924 Lawful Intercept Cisco Architecture for Lawful Intercept in IP Networks A design for intercepting and monitoring communications in IP networks. RFC 4059 Warranty Cert Extension Internet X.509 Public Key Infrastructure Warranty Certificate Extension Adding warranty information to X.509 certificates RFC 4158 Cert path building Internet X.509 Public Key Infrastructure: Certification Path Building How to find the chain of certificates linking a public key to a trusted authority. RFC 4189 Requirements for End-to-Middle Security for the Session Initiation Protocol (SIP) Protecting SIP messages from some intermediaries while letting trusted ones inspect them. RFC 4322 Opportunistic encryption Opportunistic Encryption using the Internet Key Exchange (IKE) Encryption without prior arrangement, using DNS to distribute keys. RFC 4418 UMAC UMAC: Message Authentication Code using Universal Hashing A fast, provably-secure message authentication code using universal hashing. RFC 4503 Rabbit stream cipher A Description of the Rabbit Stream Cipher Algorithm A fast encryption algorithm designed for protocols processing large amounts of data. RFC 4621 MOBIKE design Design of the IKEv2 Mobility and Multihoming (MOBIKE) Protocol How to keep IPsec tunnels running when a device changes its IP address. RFC 4705 GigaBeam link encryption GigaBeam High-Speed Radio Link Encryption Encryption and key management for GigaBeam's high-speed point-to-point radio links. RFC 4746 EAP-PAX Extensible Authentication Protocol (EAP) Password Authenticated Exchange Lightweight authentication using a shared secret with optional key provisioning and identity protection. RFC 4763 EAP-SAKE Extensible Authentication Protocol Method for Shared-secret Authentication and Key Establishment (EAP-SAKE) EAP method for mutual authentication and key establishment using a shared secret. RFC 4784 Verizon Wireless Dynamic Mobile IP Key Update for cdma2000(R) Networks A secure way to update cryptographic keys in mobile networks. RFC 4793 EAP-POTP The EAP Protected One-Time Password Protocol (EAP-POTP) An authentication method for one-time password tokens over networks. RFC 4809 Requirements for an IPsec Certificate Management Profile How IPsec VPNs and certificate systems work together at scale RFC 4891 Using IPsec to Secure IPv6-in-IPv4 Tunnels Protecting IPv6 traffic tunneled through IPv4 networks with IPsec. RFC 4894 Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec How hash algorithm weaknesses affect IPsec and IKE security. RFC 5197 MIKEY applicability On the Applicability of Various Multimedia Internet KEYing (MIKEY) Modes and Extensions Comparing the ways to hand off secret keys for encrypted calls. RFC 5217 Memorandum for Multi-Domain Public Key Infrastructure Interoperability Making different digital ID systems trust each other across organizations. RFC 5419 MIPv6 Auth Option Why the Authentication Data Suboption is Needed for Mobile IPv6 (MIPv6) Why cellular networks need simpler authentication for Mobile IPv6. RFC 5458 ULE Security Security Requirements for the Unidirectional Lightweight Encapsulation (ULE) Protocol Security requirements for IP transmitted over MPEG-2 digital broadcast. RFC 5517 Cisco Private VLANs Cisco Systems' Private VLANs: Scalable Security in a Multi-Client Environment Isolate servers and devices while sharing one subnet and conserving VLAN IDs. RFC 5637 AAA for Mobile IPv6 Authentication, Authorization, and Accounting (AAA) Goals for Mobile IPv6 Design goals for adding authentication, authorization and accounting to mobile IP services RFC 5683 PAK Password-Authenticated Key (PAK) Diffie-Hellman Exchange Adding password-based mutual authentication to Diffie-Hellman key exchange. RFC 5765 P2P Security Security Issues and Solutions in Peer-to-Peer Systems for Realtime Communications Security challenges when real-time communication relies on peers instead of centralized servers. RFC 5868 Kerberos Cross-Realm Problem Statement on the Cross-Realm Operation of Kerberos Why authentication across organizational boundaries creates operational headaches. RFC 5879 ESP-NULL Heuristics Heuristics for Detecting ESP-NULL Packets Techniques for intermediate devices to detect unencrypted IPsec traffic without modifying endpoints. RFC 5904 RADIUS for 802.16 PKMv1 RADIUS Attributes for IEEE 802.16 Privacy Key Management Version 1 (PKMv1) Protocol Support RADIUS attributes for securing wireless broadband subscriptions RFC 5909 SEND proxy problem Securing Neighbor Discovery Proxy: Problem Statement Why secure neighbor discovery and address proxying are hard to combine RFC 5916 Device Owner Attribute A certificate attribute to name a device's owner RFC 5917 Clearance Sponsor Attribute Recording who granted a security clearance in a digital certificate RFC 5930 AES-CTR for IKEv2 Using Advanced Encryption Standard Counter Mode (AES-CTR) with the Internet Key Exchange version 02 (IKEv2) Protocol A fast encryption method for protecting IKEv2 key exchange messages RFC 6070 PBKDF2 PKCS #5: Password-Based Key Derivation Function 2 (PBKDF2) Test Vectors Sample inputs and expected outputs for the PBKDF2 password hashing function. RFC 6114 CLEFIA The 128-Bit Blockcipher CLEFIA A lightweight block cipher for constrained devices. RFC 6124 EAP-EKE An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol Password-based authentication that resists dictionary attacks and requires no certificates. RFC 6193 IKE in SDP Media Description for the Internet Key Exchange Protocol (IKE) in the Session Description Protocol (SDP) Negotiate secure tunnels directly in SIP video calls. RFC 6216 SIP security call flows Example Call Flows Using Session Initiation Protocol (SIP) Security Mechanisms Worked examples showing how SIP uses TLS and S/MIME to protect messages. RFC 6218 Cisco RADIUS keying Cisco Vendor-Specific RADIUS Attributes for the Delivery of Keying Material Secure attributes for delivering cryptographic keys and authenticating RADIUS messages. RFC 6252 MPA A Framework of Media-Independent Pre-Authentication (MPA) for Inter-Domain Handover Optimization A framework for speeding handovers when mobile devices move between different network domains. RFC 6267 MIKEY-IBAKE MIKEY-IBAKE: Identity-Based Authenticated Key Exchange (IBAKE) Mode of Key Distribution in Multimedia Internet KEYing (MIKEY) Key management for multimedia security using identity-based encryption and a trusted key service. RFC 6273 SEND hash threats The Secure Neighbor Discovery (SEND) Hash Threat Analysis Evaluating hash function vulnerabilities in secure neighbor discovery. RFC 6278 Static ECDH in CMS Use of Static-Static Elliptic Curve Diffie-Hellman Key Agreement in Cryptographic Message Syntax Long-term key agreement for encrypted, authenticated, and authenticated-encrypted messages RFC 6287 OCRA OCRA: OATH Challenge-Response Algorithm Challenge-response authentication using HOTP with configurable input parameters RFC 6411 RSVP keying Applicability of Keying Methods for RSVP Security Comparing methods to protect router-to-router messages in quality-of-service networks. RFC 6479 Anti-replay no shifting IPsec Anti-Replay Algorithm without Bit Shifting An efficient IPsec anti-replay algorithm that avoids bit-shifting operations. RFC 6538 HIP Experiment Report The Host Identity Protocol (HIP) Experiment Report Lessons learned from experimental deployments of the Host Identity Protocol. RFC 6539 IBAKE IBAKE: Identity-Based Authenticated Key Exchange Identity-based key exchange that avoids key escrow and provides mutual authentication. RFC 6561 ISP Bot Remediation Recommendations for the Remediation of Bots in ISP Networks How internet providers can detect and help users clean infected computers. RFC 6664 S/MIME Key Capabilities S/MIME Capabilities for Public Key Definitions ASN.1 definitions for declaring support for public key algorithms and sizes. RFC 6684 IODEF Extension Guide Guidelines and Template for Defining Extensions to the Incident Object Description Exchange Format (IODEF) Template and guidelines for standardizing IODEF extensions RFC 6697 HOKEY Architecture Handover Keying (HOKEY) Architecture Design Architecture for reducing authentication delay when a device moves between network attachment points. RFC 6717 kx509 kx509 Kerberized Certificate Issuance Protocol in Use in 2012 Using Kerberos tickets to request X.509 certificates when Kerberos infrastructure already exists. RFC 6803 Camellia for Kerberos 5 Camellia Encryption for Kerberos 5 New encryption and checksum types for Kerberos using the Camellia block cipher. RFC 7008 KCipher-2 A Description of the KCipher-2 Encryption Algorithm A fast stream cipher algorithm using simple operations and multiple feedback shift registers RFC 7018 ADVPN Auto-Discovery VPN Problem Statement and Requirements Why hand-configuring IPsec tunnels between many sites does not scale, and what a dynamic fix must do. RFC 7034 X-Frame-Options HTTP Header Field X-Frame-Options The HTTP header that lets a site forbid other pages from displaying it in a frame, as a defense against clickjacking. RFC 7076 P6R's Secure Shell Public Key Subsystem Organize keys and certificates in namespaces over SSH. RFC 7093 Additional Methods for Generating Key Identifiers Values Alternative methods for computing certificate key identifiers RFC 7165 Use Cases and Requirements for JSON Object Signing and Encryption (JOSE) Why JSON-based object security matters for web and cloud applications. RFC 7169 The NSA (No Secrecy Afforded) Certificate Extension A satirical certificate extension for compromised keys RFC 7229 Object Identifiers for Test Certificate Policies Test certificate policy identifiers for software testing RFC 7397 Report from the Smart Object Security Workshop What experts learned about securing tiny internet-connected devices RFC 7406 Extensions to the Emergency Services Architecture for Dealing With Unauthenticated and Unauthorized Devices How emergency callers without accounts or service can still reach 911 RFC 7458 EAP for Wi-Fi and EPC Extensible Authentication Protocol (EAP) Attributes for Wi-Fi Integration with the Evolved Packet Core Six new EAP-AKA attributes let a phone ask a trusted Wi-Fi network for the same services its cellular network offers. RFC 7520 JOSE Examples Examples of Protecting Content Using JSON Object Signing and Encryption (JOSE) Test vectors for signing and encrypting JSON objects. RFC 7546 GSS Negotiation Loop Structure of the Generic Security Service (GSS) Negotiation Loop The standard pattern for two parties to establish a secure connection. RFC 7568 Deprecating SSLv3 Deprecating Secure Sockets Layer Version 3.0 Why SSL version 3.0 is broken and must not be used, with replacements. RFC 7642 SCIM Overview System for Cross-domain Identity Management: Definitions, Overview, Concepts, and Requirements Moving user accounts between cloud services with a standard format. RFC 7651 IKEv2 P-CSCF Option 3GPP IP Multimedia Subsystems (IMS) Option for the Internet Key Exchange Protocol Version 2 (IKEv2) Adding a way for IPsec gateways to tell mobile clients where to find the IMS signaling server. RFC 7744 Use Cases for Authentication and Authorization in Constrained Environments How tiny gadgets prove who they are when they can't type passwords RFC 7832 ABFAB Use Cases Application Bridging for Federated Access Beyond Web (ABFAB) Use Cases Federated identity for non-web applications and services. RFC 7906 NSA's Cryptographic Message Syntax (CMS) Key Management Attributes Attributes for managing cryptographic keys in CMS packages RFC 7966 Diameter AVP Security Security at the Attribute-Value Pair (AVP) Level for Non-neighboring Diameter Nodes: Scenarios and Requirements End-to-end security for individual data elements in Diameter messages. RFC 8009 AES-SHA2 for Kerberos AES Encryption with HMAC-SHA2 for Kerberos 5 Modern encryption and integrity protection for Kerberos network authentication. RFC 8133 SESPAKE The Security Evaluated Standardized Password-Authenticated Key Exchange (SESPAKE) Protocol A cryptographic way to create a secure secret from a shared password RFC 8236 J-PAKE J-PAKE: Password-Authenticated Key Exchange by Juggling Secure key exchange using only a shared password, without PKI. RFC 8248 SACM Requirements Security Automation and Continuous Monitoring (SACM) Requirements Framework for automating security posture assessment and monitoring across networks. RFC 8269 ARIA in SRTP The ARIA Algorithm and Its Use with the Secure Real-Time Transport Protocol (SRTP) Secure real-time media using the ARIA block cipher. RFC 8351 PKCS #8 media type The PKCS #8 EncryptedPrivateKeyInfo Media Type Register the official MIME type for encrypted private key files. RFC 8409 SAML entity categories The Entity Category Security Assertion Markup Language (SAML) Attribute Types SAML attributes for categorizing and supporting identity federation entities RFC 8448 Example Handshake Traces for TLS 1.3 Worked examples for testing TLS 1.3 implementations RFC 8462 MaRNEW Workshop Report from the IAB Workshop on Managing Radio Networks in an Encrypted World (MaRNEW) How radio networks can optimize traffic as encryption becomes the norm. RFC 8479 Storing Validation Parameters in PKCS#8 Attaching validation proofs to stored RSA and DSA private keys. RFC 8649 Hash of Root Key Hash Of Root Key Certificate Extension Announcing the next root CA key so relying parties can smoothly transition RFC 8734 Brainpool for TLS 1.3 Elliptic Curve Cryptography (ECC) Brainpool Curves for Transport Layer Security (TLS) Version 1.3 Support for ECC Brainpool cryptographic curves in the latest TLS version RFC 8756 CNSA profile for CMC Commercial National Security Algorithm (CNSA) Suite Profile of Certificate Management over CMS Managing certificates using NSA-approved algorithms and CMC protocol. RFC 8769 CMS types for CBOR Cryptographic Message Syntax (CMS) Content Types for Concise Binary Object Representation (CBOR) Registers content types to wrap compact binary objects in cryptographic containers. RFC 8894 SCEP Simple Certificate Enrolment Protocol A simple protocol for devices to request and renew certificates over HTTP RFC 8998 ShangMi TLS 1.3 ShangMi (SM) Cipher Suites for TLS 1.3 Chinese cryptographic algorithms for secure web connections. RFC 9021 WalnutDSA COSE Use of the Walnut Digital Signature Algorithm with CBOR Object Signing and Encryption (COSE) A lightweight, quantum-resistant signature algorithm for small devices. RFC 9054 COSE Hash Algorithms CBOR Object Signing and Encryption (COSE): Hash Algorithms Naming and using standard hash functions in signed and encrypted messages. RFC 9124 IoT Firmware Manifest A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices What information a device needs to securely install a firmware update. RFC 9152 SODP Secure Object Delivery Protocol (SODP) Server Interfaces: NSA's Profile for Delivery of Certificates, Certificate Revocation Lists (CRLs), and Symmetric Keys to Clients NSA's specification for how secure servers deliver certificates, keys, and revocation lists to government devices. RFC 9185 DTLS Tunnel between a Media Distributor and Key Distributor to Facilitate Key Exchange A protocol for secure key exchange in multimedia conferences with selective transparency. RFC 9189 GOST TLS 1.2 GOST Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.2 Support for Russian cryptographic standards in secure web connections RFC 9206 Commercial National Security Algorithm (CNSA) Suite Cryptography for Internet Protocol Security (IPsec) NSA's approved encryption standards for IPsec tunnels in national security systems RFC 9212 CNSA Suite for SSH Commercial National Security Algorithm (CNSA) Suite Cryptography for Secure Shell (SSH) NSA-approved cryptographic algorithms for securing government SSH connections. RFC 9216 S/MIME Test Certificates S/MIME Example Keys and Certificates Shared example keys and certificates for testing secure email implementations. RFC 9284 DOTS Multihoming Multihoming Deployment Considerations for DDoS Open Threat Signaling (DOTS) How to ask for DDoS help from multiple internet providers RFC 9321 SVT Signature Validation Token Proving a signature was valid at a specific time, so it can be verified later without the original. RFC 9333 Minimal ESP Minimal IP Encapsulating Security Payload (ESP) Which features of IP Encapsulating Security Payload can be left out on constrained devices. RFC 9367 GOST TLS 1.3 GOST Cipher Suites for Transport Layer Security (TLS) Protocol Version 1.3 Russian cryptographic standards for secure web connections. RFC 9381 VRF Verifiable Random Functions (VRFs) The public-key version of a keyed hash function with proof of correctness. RFC 9383 SPAKE2+ SPAKE2+, an Augmented Password-Authenticated Key Exchange (PAKE) Protocol Password exchange where only the client needs to remember the password. RFC 9385 GOST IKEv2 Using GOST Cryptographic Algorithms in the Internet Key Exchange Protocol Version 2 (IKEv2) Using Russian cryptographic standards in IPsec key exchange. RFC 9387 DOTS Telemetry Use Cases Use Cases for DDoS Open Threat Signaling (DOTS) Telemetry Using detailed attack information to mitigate DDoS attacks more efficiently. RFC 9397 TEEP Architecture Trusted Execution Environment Provisioning (TEEP) Architecture How to securely install and manage trusted programs inside a protected computer enclave. RFC 9490 M-TEN workshop report Report from the IAB Workshop on Management Techniques in Encrypted Networks (M-TEN) Network management meets ubiquitous encryption RFC 9500 PKC test keys Standard Public Key Cryptography (PKC) Test Keys Well-known, publicly available cryptographic keys for testing, analogous to EICAR and GTUBE test files. RFC 9548 GOST PFX containers Generating Transport Key Containers (PFX) Using the GOST Algorithms How to package GOST cryptographic keys and certificates for secure storage and exchange. RFC 9563 SM2 for DNSSEC SM2 Digital Signature Algorithm for DNSSEC Digital signature method using SM2 elliptic curves and SM3 hashing RFC 9591 FROST The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures A cryptographic protocol for distributed digital signatures. RFC 9750 MLS architecture The Messaging Layer Security (MLS) Architecture How secure group messaging systems work RFC 9771 AEAD properties Properties of Authenticated Encryption with Associated Data (AEAD) Algorithms A dictionary of special properties that sealed algorithms can have RFC 9807 OPAQUE aPAKE The OPAQUE Augmented Password-Authenticated Key Exchange (aPAKE) Protocol Mutual authentication using passwords without revealing them to the server RFC 9850 SSLKEYLOGFILE The SSLKEYLOGFILE Format for TLS A standardized format for logging TLS secrets to enable decryption of encrypted traffic. RFC 9858 HSS/LMS parameter sets Additional Parameter Sets for HSS/LMS Hash-Based Signatures Smaller hash-based signatures using alternative hash functions. RFC 9861 KangarooTwelve KangarooTwelve and TurboSHAKE Fast, parallelizable hash functions with variable-length output. RFC 9932 TLS in federations Mutually Authenticating TLS in the Context of Federations How organizations share secure connections with automatic identity verification. RFC 9941 sntrup761x25519-sha512 Secure Shell (SSH) Key Exchange Method Using Hybrid Streamlined NTRU Prime sntrup761 and X25519 with SHA-512: sntrup761x25519-sha512 Post-quantum secure SSH key exchange combining two algorithms. RFC 9949 BUSA-TLS BUSA-TLS: Mandatory Audio Component (MAC) Pre-Shared Key (PSK) Derivation for TLS 1.3 Using 2 Live Crew's "Banned in the U.S.A." Replacing TLS 1.3's zero-byte key derivation input with a song hash. RFC 9955 Hybrid signatures Hybrid Signature Spectrums Taxonomy of design choices and security tradeoffs for hybrid digital signatures. RFC 10032 AEGIS AEAD The AEGIS Authenticated Encryption Algorithms Fast authenticated encryption algorithms built from the AES round function. RFC 10033 HBS state management Hash-Based Signatures: State and Backup Management Tracking and protecting one-time keys in quantum-resistant signatures RFC 10042 PQ/T hybrid kex for SSH Post-Quantum/Traditional Hybrid Key Exchange with the Module-Lattice-Based Key-Encapsulation Mechanism for Use in SSH Combining quantum-resistant and traditional key exchange in SSH RFC 1038 IP Security Option Draft revised IP security option Labeling packets with security classifications and protection authorities RFC 4402 Kerberos GSS-API PRF A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism Generating fresh secret keys from an existing Kerberos security context. RFC 4869 Suite B for IPsec Suite B Cryptographic Suites for IPsec Four pre-configured sets of encryption and authentication algorithms for IPsec aligned with NSA standards. RFC 5430 Suite B TLS Suite B Profile for Transport Layer Security (TLS) NSA-approved cryptography for Transport Layer Security RFC 2059 RADIUS Accounting RADIUS Accounting How to track who logged in, how long they stayed, and how much data they used. RFC 7569 MAC Label Registry Registry Specification for Mandatory Access Control (MAC) Security Label Formats A registry that lets many different security label formats share one numbered list instead of forcing a single format. RFC 8813 ECC key usage Clarifications for Elliptic Curve Cryptography Subject Public Key Information Elliptic curve certificates must not set the keyEncipherment or dataEncipherment key usage bits. RFC 8951 EST Clarifications Clarification of Enrollment over Secure Transport (EST): Transfer Encodings and ASN.1 Fixes to the enrollment protocol for securing devices with certificates. RFC 8997 Deprecate TLS 1.1 Email Deprecation of TLS 1.1 for Email Submission and Access Email clients and servers should now require TLS 1.2 or later, not TLS 1.1, for submission and access. RFC 9155 No MD5/SHA-1 in TLS 1.2 Deprecating MD5 and SHA-1 Signature Hashes in TLS 1.2 and DTLS 1.2 TLS 1.2 and DTLS 1.2 may no longer use MD5 or SHA-1 in digital signatures. RFC 9295 Ed25519 Key Usage Clarifications for Ed25519, Ed448, X25519, and X448 Algorithm Identifiers Clarifies key usage bits for modern elliptic curve algorithms in certificates. RFC 10007 CRL key usage check Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) Validation Requiring that CRL issuer certificates explicitly carry the cRLSign capability. RFC 1409 Telnet auth Telnet Authentication Option A way for Telnet client and server to agree on how to verify the user's identity RFC 5081 OpenPGP for TLS Using OpenPGP Keys for Transport Layer Security (TLS) Authentication TLS can authenticate using OpenPGP keys instead of X.509 certificates. RFC 1351 SNMP Admin Model SNMP Administrative Model Party-based security framework for administering SNMP management operations. RFC 912 Authentication service Authentication service Query a server to learn who owns a TCP connection RFC 6711 LoA registry An IANA Registry for Level of Assurance (LoA) Profiles A searchable list of authentication strength levels used in identity systems RFC 8411 Crypto OID range IANA Registration for the Cryptographic Algorithm Object Identifier Range A donated range of cryptographic algorithm identifiers for Edwards curves. RFC 8758 Deprecate RC4 in SSH Deprecating RC4 in Secure Shell (SSH) Remove support for the weakened RC4 stream cipher from Secure Shell. RFC 9158 Update to the Object Identifier Registry for the PKIX Working Group Adds two PKIX object identifiers missing from RFC 7299 and creates a registry for their arc. RFC 1004 COOKIE-JAR Distributed-protocol authentication scheme Secure authentication across different network trust domains using a trusted server. RFC 2523 Photuris Photuris: Extended Schemes and Attributes Extensible schemes and attributes for secure key agreement. RFC 2649 An LDAP Control and Schema for Holding Operation Signatures Digital signatures on LDAP directory changes to create an audit trail. RFC 2786 Diffie-Helman USM Key Management Information Base and Textual Convention Forward secrecy and device bootstrapping for SNMPv3 security RFC 3163 ISO/IEC 9798-3 Authentication SASL Mechanism A SASL authentication mechanism based on public key signatures using X.509 certificates. RFC 4764 EAP-PSK The EAP-PSK Protocol: A Pre-Shared Key Extensible Authentication Protocol (EAP) Method Lightweight authentication for wireless networks using only a shared secret. RFC 4767 IDXP The Intrusion Detection Exchange Protocol (IDXP) A protocol for intrusion detection systems to exchange alerts and analysis over a secure connection. RFC 5210 SAVA testbed A Source Address Validation Architecture (SAVA) Testbed and Deployment Experience A working prototype that validates IP source addresses to stop packet spoofing attacks across networks. RFC 5636 Traceable anonymous cert Traceable Anonymous Certificate X.509 certificates with pseudonyms that can be traced to the real user if needed. RFC 5697 Other Certificates Extension An extension that lets linked certificates point back to each other so applications can recognize a renewed certificate. RFC 5873 PANA Pre-Authentication Pre-Authentication Support for the Protocol for Carrying Authentication for Network Access (PANA) Authenticate with a future network before switching to it. RFC 5981 NSLP authorization Authorization for NSIS Signaling Layer Protocols Authorization tokens so routers can verify that resource requests are legitimate RFC 6358 Additional Master Secret Inputs for TLS Allowing TLS extensions to contribute additional data to the master secret. RFC 6537 HIP DHT Interface Host Identity Protocol Distributed Hash Table Interface Using distributed hash tables to look up Host Identity Protocol addresses RFC 6617 Secure PSK for IKE Secure Pre-Shared Key (PSK) Authentication for the Internet Key Exchange Protocol (IKE) Authentication method for IKE resistant to dictionary attacks with weak passwords RFC 6618 MIPv6 TLS Security Mobile IPv6 Security Framework Using Transport Layer Security for Communication between the Mobile Node and Home Agent Alternative security framework for Mobile IPv6 using TLS instead of IPsec RFC 6628 AugPAKE Efficient Augmented Password-Only Authentication and Key Exchange for IKEv2 Secure password-only authentication for IKEv2 without storing passwords on servers. RFC 6631 IKEv2 PACE Password Authenticated Connection Establishment with the Internet Key Exchange Protocol version 2 (IKEv2) Password Authenticated Connection Establishment integrated into IKEv2. RFC 6867 IKEv2 ERP An Internet Key Exchange Protocol Version 2 (IKEv2) Extension to Support EAP Re-authentication Protocol (ERP) A fast way to re-authenticate VPN connections using EAP without repeating the full authentication. RFC 8672 TLS identity pinning TLS Server Identity Pinning with Tickets TLS extensions that automatically detect when a server changes, using an encrypted secret shared on the first connection. RFC 8902 TLS Authentication Using Intelligent Transport System (ITS) Certificates Adding ITS vehicle certificates to TLS secure connections RFC 9102 TLS DNSSEC Chain TLS DNSSEC Chain Extension Carrying DNS security proofs inside the TLS handshake RFC 9891 ACME DTN node ID Automated Certificate Management Environment (ACME) Delay-Tolerant Networking (DTN) Node ID Validation Extension How a certificate authority can check that a client really controls a Delay-Tolerant Networking node name before issuing it a certificate. RFC 7410 A Property Types Registry for the Authentication-Results Header Field Creating a registry for types of information in email authentication results. RFC 4718 IKEv2 clarifications IKEv2 Clarifications and Implementation Guidelines Clarifications and implementation guidance for the IKEv2 key exchange protocol. RFC 5748 IANA Registry Update for Support of the SEED Cipher Algorithm in Multimedia Internet KEYing (MIKEY) Registers code points so the SEED cipher can be negotiated for SRTP and SRTCP in MIKEY. RFC 6932 Brainpool Elliptic Curves for the Internet Key Exchange (IKE) Group Description Registry Four Brainpool elliptic curves get code points in the IKE Group Description registry so other protocols can name them. RFC 7762 Initial Assignment for the Content Security Policy Directives Registry Creates the IANA registry for Content Security Policy directives and seeds it with the 16 directives from CSP Level 2. RFC 8809 WebAuthn registries Registries for Web Authentication (WebAuthn) Official IANA registries for WebAuthn features. RFC 1455 Physical Link Security Type of Service A Type of Service marking for routing over more physically secure network links. RFC 644 On the problem of signature authentication for network mail How to verify network mail really comes from the claimed sender RFC 1353 SNMP Parties MIB Definitions of Managed Objects for Administration of SNMP Parties Management objects for administering SNMP party-based security RFC 1414 Ident MIB Identification MIB Ask the network management system who owns a TCP connection. RFC 1910 SNMPv2 USM User-based Security Model for SNMPv2 Security model for SNMPv2 using user identity, authentication, and encryption.