RFC 9257: Guidance for External Pre-Shared Key (PSK) Usage in TLS

This document provides usage guidance for external Pre-Shared Keys (PSKs) in Transport Layer Security (TLS) 1.3 as defined in RFC 8446. It lists TLS security…

Read RFC 9257 on the RFC Editor

Outgoing relationships (13 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Normative reference — RFC 9258: Importing External Pre-Shared Keys (PSKs) for TLS 1.3
Informative reference — RFC 2865: Remote Authentication Dial In User Service (RADIUS)
Informative reference — RFC 3748: Extensible Authentication Protocol (EAP)
Informative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Informative reference — RFC 4122: A Universally Unique IDentifier (UUID) URN Namespace
Informative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informative reference — RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)
Informative reference — RFC 6614: Transport Layer Security (TLS) Encryption for RADIUS
Informative reference — RFC 7925: Transport Layer Security (TLS) / Datagram Transport Layer Security (DTLS) Profiles for the Internet of Things
Informative reference — RFC 8773: TLS 1.3 Extension for Certificate-Based Authentication with an External Pre-Shared Key

Incoming relationships (4 related RFCs)

Normatively referenced by — RFC 9813: Operational Considerations for Using TLS Pre-Shared Keys (TLS-PSKs) with RADIUS
Normatively referenced by — RFC 9950: A YANG Data Model for Terminal Access Controller Access-Control System Plus (TACACS+)
Informatively referenced by — RFC 9645: YANG Groupings for TLS Clients and TLS Servers
Informatively referenced by — RFC 9887: Terminal Access Controller Access-Control System Plus (TACACS+) over TLS 1.3