RFC 8446 - 传输层安全协议 (TLS) 1.3版本
发布日期: 2018年8月
状态: 标准跟踪协议 (Standards Track)
作者: E. Rescorla (Mozilla)
废弃: RFC 5077, RFC 5246, RFC 6961
更新: RFC 5705, RFC 6066
摘要 (Abstract)
本文档规定了传输层安全 (TLS) 协议的1.3版本。TLS允许客户端/服务器应用程序以一种旨在防止窃听、篡改和消息伪造的方式通过互联网进行通信。
本文档更新了RFC 5705和RFC 6066,并废弃了RFC 5077、RFC 5246和RFC 6961。本文档还为TLS 1.2实现规定了新的要求。
目录 (Contents)
- 1. Introduction (简介)
- 1.1 Conventions and Terminology (约定和术语)
- 1.2 Major Differences from TLS 1.2 (与TLS 1.2的主要差异)
- 1.3 Updates Affecting TLS 1.2 (影响TLS 1.2的更新)
- 2. Protocol Overview (协议概述)
- 2.1 Incorrect DHE Share (不正确的DHE共享)
- 2.2 Resumption and Pre-Shared Key (PSK) (恢复和预共享密钥)
- 2.3 0-RTT Data (零往返时间数据)
- 3. Presentation Language (表示语言)
- 3.1 Basic Block Size (基本块大小)
- 3.2 Miscellaneous (杂项)
- 3.3 Numbers (数字)
- 3.4 Vectors (向量)
- 3.5 Enumerateds (枚举)
- 3.6 Constructed Types (构造类型)
- 3.7 Constants (常量)
- 3.8 Variants (变体)
- 4. Handshake Protocol (握手协议)
- 4.1 Key Exchange Messages (密钥交换消息)
- 4.2 Extensions (扩展)
- 4.3 Server Parameters (服务器参数)
- 4.4 Authentication Messages (认证消息)
- 4.5 End of Early Data (早期数据结束)
- 4.6 Post-Handshake Messages (握手后消息)
- 5. Record Protocol (记录协议)
- 5.1 Record Layer (记录层)
- 5.2 Record Payload Protection (记录有效载荷保护)
- 5.3 Per-Record Nonce (每记录随机数)
- 5.4 Record Padding (记录填充)
- 5.5 Limits on Key Usage (密钥使用限制)
- 6. Alert Protocol (警报协议)
- 6.1 Closure Alerts (关闭警报)
- 6.2 Error Alerts (错误警报)
- 7. Cryptographic Computations (加密计算)
- 7.1 Key Schedule (密钥调度)
- 7.2 Updating Traffic Secrets (更新流量密钥)
- 7.3 Traffic Key Calculation (流量密钥计算)
- 7.4 (EC)DHE Shared Secret Calculation (共享密钥计算)
- 7.5 Exporters (导出器)
- 8. 0-RTT and Anti-Replay (零往返和防重放)
- 8.1 Single-Use Tickets (单次使用票据)
- 8.2 Client Hello Recording (客户端Hello记录)
- 8.3 Freshness Checks (新鲜度检查)
- 9. Compliance Requirements (合规要求)
- 9.1 Mandatory-to-Implement Cipher Suites (强制实现的密码套件)
- 9.2 Mandatory-to-Implement Extensions (强制实现的扩展)
- 9.3 Protocol Invariants (协议不变量)
- 10. Security Considerations (安全考虑)
- 11. IANA Considerations (IANA考虑)
- 12. References (参考文献)
- 12.1 Normative References (规范性参考文献)
- 12.2 Informative References (信息性参考文献)
附录 (Appendices)
- Appendix A. State Machine (状态机)
- A.1 Client (客户端)
- A.2 Server (服务器)
- Appendix B. Protocol Data Structures and Constant Values (协议数据结构和常量值)
- B.1 Record Layer (记录层)
- B.2 Alert Messages (警报消息)
- B.3 Handshake Protocol (握手协议)
- B.4 Cipher Suites (密码套件)
- Appendix C. Implementation Notes (实现说明)
- C.1 Random Number Generation and Seeding (随机数生成和种子)
- C.2 Certificates and Authentication (证书和认证)
- C.3 Implementation Pitfalls (实现陷阱)
- C.4 Client Tracking Prevention (客户端跟踪防护)
- C.5 Unauthenticated Operation (未认证操作)
- Appendix D. Backward Compatibility (向后兼容性)
- D.1 Negotiating with an Older Server (与旧服务器协商)
- D.2 Negotiating with an Older Client (与旧客户端协商)
- D.3 0-RTT Backward Compatibility (0-RTT向后兼容性)
- D.4 Middlebox Compatibility Mode (中间盒兼容模式)
- D.5 Security Restrictions Related to Backward Compatibility (与向后兼容性相关的安全限制)
- Appendix E. Overview of Security Properties (安全属性概述)
- E.1 Handshake (握手)
- E.2 Record Layer (记录层)
- E.3 Traffic Analysis (流量分析)
- E.4 Side-Channel Attacks (侧信道攻击)
- E.5 Replay Attacks on 0-RTT (对0-RTT的重放攻击)
- E.6 PSK Identity Exposure (PSK身份暴露)
- E.7 Sharing PSKs (共享PSK)
- E.8 Attacks on Static RSA (对静态RSA的攻击)
相关资源
- 官方原文: RFC 8446
- 官方页面: RFC 8446 DataTracker
- 勘误表: RFC Editor Errata