I-D Action: draft-sullivan-tls-xof-schedule-00.txt

Internet-Draft draft-sullivan-tls-xof-schedule-00.txt is now available.

   Title:   XOF-based key schedules for TLS 1.3
   Author:  Nick Sullivan
   Name:    draft-sullivan-tls-xof-schedule-00.txt
   Pages:   58
   Dates:   2026-07-24

Abstract:

   TLS 1.3 runs its entire key schedule on HKDF over SHA-2.  This
   document defines an extension that replaces that schedule with one
   built on an extendable-output function (XOF): the negotiated KDF
   governs every derivation, the Finished and binder MACs, and the
   transcript hash, so no SHA-2 remains in the key schedule.  The cipher
   suites, AEAD algorithms, state machine, and record layer are
   unchanged, and a connection without the extension uses HKDF as today.
   Two KDFs are defined, SHAKE256 and the reduced-round TurboSHAKE256.
   This document updates RFC 9258.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-sullivan-tls-xof-schedule/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-sullivan-tls-xof-schedule-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]