RFC 7696: Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms

Many IETF protocols use cryptographic algorithms to provide confidentiality, integrity, authentication, or digital signature. Communicating peers must support…

Read RFC 7696 on the RFC Editor

Outgoing relationships (22 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys
Informative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Informative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 4303: IP Encapsulating Security Payload (ESP)
Informative reference — RFC 5652: Cryptographic Message Syntax (CMS)
Informative reference — RFC 4302: IP Authentication Header
Informative reference — RFC 6347: Datagram Transport Layer Security Version 1.2
Informative reference — RFC 3748: Extensible Authentication Protocol (EAP)
Informative reference — RFC 7525: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informative reference — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 4422: Simple Authentication and Security Layer (SASL)
Informative reference — RFC 5751: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.2 Message Specification
Informative reference — RFC 5116: An Interface and Algorithms for Authenticated Encryption
Informative reference — RFC 7435: Opportunistic Security: Some Protection Most of the Time
Informative reference — RFC 3610: Counter with CBC-MAC (CCM)
Informative reference — RFC 3365: Strong Security Requirements for Internet Engineering Task Force Standard Protocols
Informative reference — RFC 4307: Cryptographic Algorithms for Use in the Internet Key Exchange Version 2 (IKEv2)
Informative reference — RFC 6916: Algorithm Agility Procedure for the Resource Public Key Infrastructure (RPKI)
Informative reference — RFC 7366: Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informative reference — RFC 1984: IAB and IESG Statement on Cryptographic Technology and the Internet
Informative reference — RFC 6975: Signaling Cryptographic Algorithm Understanding in DNS Security Extensions (DNSSEC)

Incoming relationships (9 related RFCs)

Informatively referenced by — RFC 8928: Address-Protected Neighbor Discovery for Low-Power and Lossy Networks
Informatively referenced by — RFC 8945: Secret Key Transaction Authentication for DNS (TSIG)
Informatively referenced by — RFC 8844: Unknown Key-Share Attacks on Uses of TLS with the Session Description Protocol (SDP)
Informatively referenced by — RFC 9530: Digest Fields
Informatively referenced by — RFC 8019: Protecting Internet Key Exchange Protocol Version 2 (IKEv2) Implementations from Distributed Denial-of-Service Attacks
Informatively referenced by — RFC 9397: Trusted Execution Environment Provisioning (TEEP) Architecture
Informatively referenced by — RFC 9170: Long-Term Viability of Protocol Extension Mechanisms
Informatively referenced by — RFC 9231: Additional XML Security Uniform Resource Identifiers (URIs)
Informatively referenced by — RFC 9704: Establishing Local DNS Authority in Validated Split-Horizon Environments