RFC 9142: Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH)

This document updates the recommended set of key exchange methods for use in the Secure Shell (SSH) protocol to meet evolving needs for stronger security. It…

Read RFC 9142 on the RFC Editor

Outgoing relationships (21 related RFCs)

Updates, Normative reference — RFC 4253: The Secure Shell (SSH) Transport Layer Protocol
Updates, Normative reference — RFC 4250: The Secure Shell (SSH) Protocol Assigned Numbers
Updates, Informative reference — RFC 4462: Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol
Updates, Informative reference — RFC 4432: RSA Key Exchange for the Secure Shell (SSH) Transport Layer Protocol
Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8731: Secure Shell (SSH) Key Exchange Method Using Curve25519 and Curve448
Normative reference — RFC 8268: More Modular Exponentiation (MODP) Diffie-Hellman (DH) Key Exchange (KEX) Groups for Secure Shell (SSH)
Normative reference — RFC 8308: Extension Negotiation in the Secure Shell (SSH) Protocol
Normative reference — RFC 8270: Increase the Secure Shell Minimum Recommended Diffie-Hellman Modulus Size to 2048 Bits
Informative reference — RFC 4086: Randomness Requirements for Security
Informative reference — RFC 2409: The Internet Key Exchange (IKE)
Informative reference — RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Informative reference — RFC 4251: The Secure Shell (SSH) Protocol Architecture
Informative reference — RFC 7748: Elliptic Curves for Security
Informative reference — RFC 6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms
Informative reference — RFC 3526: More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
Informative reference — RFC 5656: Elliptic Curve Algorithm Integration in the Secure Shell Transport Layer
Informative reference — RFC 4419: Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol
Informative reference — RFC 8031: Curve25519 and Curve448 for the Internet Key Exchange Protocol Version 2 (IKEv2) Key Agreement
Informative reference — RFC 8732: Generic Security Service Application Program Interface (GSS-API) Key Exchange with SHA-2

Incoming relationships (1 related RFC)

Informatively referenced by — RFC 9212: Commercial National Security Algorithm (CNSA) Suite Cryptography for Secure Shell (SSH)