RFC 8773: TLS 1.3 Extension for Certificate-Based Authentication with an External Pre-Shared Key

This document specifies a TLS 1.3 extension that allows a server to authenticate with a combination of a certificate and an external pre-shared key (PSK).

Read RFC 8773 on the RFC Editor

Outgoing relationships (7 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Informative reference — RFC 4086: Randomness Requirements for Security
Informative reference — RFC 8017: PKCS #1: RSA Cryptography Specifications Version 2.2

Incoming relationships (3 related RFCs)

Obsoleted by — RFC 9973: TLS 1.3 Extension for Using Certificates with an External Pre-Shared Key
Informatively referenced by — RFC 9257: Guidance for External Pre-Shared Key (PSK) Usage in TLS
Informatively referenced by — RFC 9954: Hybrid Key Exchange in TLS 1.3