Sep 7, 2025 · Design considerations from draft-stebila-tls-hybrid-design-00 and draft-stebila-tls-hybrid-design-01 are moved to the appendix.¶ A single construction is given in the main body.¶

Nov 5, 2025 · Like other modern websites, the IETF Datatracker relies on Javascript. Please enable Javascript for full functionality. Hybrid key exchange in TLS 1.3 draft-ietf-tls-hybrid …

Internet-Draft stebila-tls-hybrid-design July 2019 "hybrid" property: the resulting secret is secure as long as at least one of the component key exchange algorithms is unbroken.

Introduction This document categorizes various design decisions one could make when implementing hybrid key exchange in TLS 1.3, with the goal of fostering discussion, providing …

Hybrid key exchange refers to using multiple key exchange algorithms simultaneously and combining the result with the goal of providing security even if all but one of the component …

Aug 13, 2025 · Hi, I have reviewed draft-ietf-tls-hybrid-design as part of the IETF Last Call process. The draft presents a framework for using multiple key exchange algorithms such that …

Oct 15, 2020 · Discussion of this work is encouraged to happen on the TLS IETF mailing list [email protected] or on the GitHub repository which contains the draft: …

Considering other IETF standards, there is work on post-quantum preshared keys in IKEv2 [IKE-PSK] and a framework for hybrid key exchange in IKEv2 [IKE-HYBRID]. The XMSS hash …

IETF working groups or external organizations, and would it therefore benefit from their review? Have those reviews occurred? If yes, describe which reviews took place. This is a TLS specific …

multiple types of keying material in TLS is the use of pre-shared keys, especially the recent TLS working group document on including an external pre-shared key [EXTERN-PSK]. Considering …