RFC 8732: Generic Security Service Application Program Interface (GSS-API) Key Exchange with SHA-2

This document specifies additions and amendments to RFC 4462. It defines a new key exchange method that uses SHA-2 for integrity and deprecates weak…

Read RFC 8732 on the RFC Editor

Outgoing relationships (14 related RFCs)

Updates, Normative reference — RFC 4462: Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 1321: The MD5 Message-Digest Algorithm
Normative reference — RFC 2743: Generic Security Service Application Program Interface Version 2, Update 1
Normative reference — RFC 7748: Elliptic Curves for Security
Normative reference — RFC 3526: More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
Normative reference — RFC 5656: Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer
Normative reference — RFC 8731: Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448
Normative reference — RFC 7546: Structure of the Generic Security Service (GSS) Negotiation Loop
Informative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Informative reference — RFC 6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms
Informative reference — RFC 8268: More Modular Exponentiation (MODP) Diffie-Hellman (DH) Key Exchange (KEX) Groups for Secure Shell (SSH)

Incoming relationships (1 related RFC)

Informatively referenced by — RFC 9142: Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)