Transport Layer Security (TLS) Parameters

Transport Layer Security (TLS) Parameters
Transport Layer Security (TLS) Parameters
Created
2005-08-23
2026-04-16
Related Registry Group(s)
Transport Layer Security (TLS) Extensions
Available Formats
XML
HTML
Plain text
Registries Included Below
TLS ClientCertificateType Identifiers
TLS Cipher Suites
TLS ContentType
TLS Alerts
TLS HandshakeType
TLS Supported Groups
TLS EC Point Formats
TLS EC Curve Types
TLS Supplemental Data Formats (SupplementalDataType)
TLS UserMappingType Values
TLS SignatureAlgorithm
TLS HashAlgorithm
TLS Exporter Labels
TLS Authorization Data Formats
TLS Heartbeat Message Types
TLS Heartbeat Modes
TLS SignatureScheme
TLS PskKeyExchangeMode
TLS KDF Identifiers
TLS SSLKEYLOGFILE Labels
TLS RRC Message Types
TLS ClientCertificateType Identifiers
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC5246
][
RFC8447
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
The role of the designated expert is described in [
RFC8447
].
The designated expert [
RFC8126
] ensures that the specification is
publicly available. It is sufficient to have an Internet-Draft
(that is posted and never published as an RFC) or a document from
another standards body, industry consortium, university site, etc.
The expert may provide more in-depth reviews, but their approval
should not be taken as an endorsement of the identifier.
Note
As specified in [
RFC8126
], assignments made in the Private Use
space are not generally useful for broad interoperability. It is
the responsibility of those making use of the Private Use range to
ensure that no conflicts occur (within the intended scope of use).
For widespread experiments, temporary reservations are available.
Note
The values in this registry are only applicable to (D)TLS
protocol versions prior to 1.3.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Available Formats
CSV
Range
Registration Procedures
0-223 ("Recommended" set to/transitioning from "Y" or "D")
Either Standards Action with Expert Review or IESG Approval
0-223 ("Recommended" set to "N," not transitioning from another value)
Specification Required
224-255
Reserved for Private Use
Value
Description
DTLS-OK
Recommended
Reference
Comment
Unassigned
rsa_sign
RFC5246
][
RFC9847
dss_sign
RFC5246
][
RFC9847
rsa_fixed_dh
RFC5246
][
RFC9847
][
RFC-ietf-tls-deprecate-obsolete-kex-08
dss_fixed_dh
RFC5246
][
RFC9847
][
RFC-ietf-tls-deprecate-obsolete-kex-08
rsa_ephemeral_dh_RESERVED
RFC5246
][
RFC9847
dss_ephemeral_dh_RESERVED
RFC5246
][
RFC9847
7-19
Unassigned
20
fortezza_dms_RESERVED
RFC5246
][
RFC9847
21-63
Unassigned
64
ecdsa_sign
RFC8422
][
RFC9847
65
rsa_fixed_ecdh
RFC8422
][
RFC9847
][
RFC-ietf-tls-deprecate-obsolete-kex-08
66
ecdsa_fixed_ecdh
RFC8422
][
RFC9847
][
RFC-ietf-tls-deprecate-obsolete-kex-08
67
gost_sign256
RFC9189
][
RFC9847
68
gost_sign512
RFC9189
][
RFC9847
69-223
Unassigned
224-255
Reserved for Private Use
RFC5246
TLS Cipher Suites
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC-ietf-tls-rfc8446bis-13
][
RFC8447
][
RFC9147
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
WARNING
Cryptographic algorithms and parameters will be broken or
weakened over time. Blindly implementing cipher suites listed here
is not advised. Implementers and users need to check that the
cryptographic algorithms listed continue to provide the expected
level of security.
Note
Although TLS 1.3 uses the same cipher suite space as previous
versions of TLS, TLS 1.3 cipher suites are defined differently,
only specifying the symmetric ciphers and hash function, and
cannot be used for TLS 1.2. Similarly, TLS 1.2 and lower cipher
suite values cannot be used with TLS 1.3.
Note
CCM_8 cipher suites are not marked as "Recommended". These
cipher suites have a significantly truncated authentication tag
that represents a security trade-off that may not be appropriate
for general environments.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Note
The role of the designated expert is described in [
RFC8447
].
The designated expert [
RFC8126
] ensures that the specification is
publicly available. It is sufficient to have an Internet-Draft
(that is posted and never published as an RFC) or a document from
another standards body, industry consortium, university site, etc.
The expert may provide more in-depth reviews, but their approval
should not be taken as an endorsement of the cipher suite.
Note
As specified in [
RFC8126
], assignments made in the Private Use
space are not generally useful for broad interoperability. It is
the responsibility of those making use of the Private Use range to
ensure that no conflicts occur (within the intended scope of use).
For widespread experiments, temporary reservations are available.
Note
Any TLS cipher suite that is specified for use with DTLS MUST
define limits on the use of the associated AEAD function that
preserves margins for both confidentiality and integrity,
as specified in Section 4.5.3 of [
RFC9147
].
Note
When this registry is modified, the YANG module
"iana-tls-cipher-suite-algs" [
iana-tls-cipher-suite-algs
] must be
updated as defined in [
RFC9645
].
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
"Recommended" set to/transitioning from "Y" or "D"
Either Standards Action With Expert Review or IESG Approval
"Recommended" set to "N," not transitioning from another value
Specification Required
Value
Description
DTLS-OK
Recommended
Reference
Comment
0x00,0x00
TLS_NULL_WITH_NULL_NULL
RFC5246
0x00,0x01
TLS_RSA_WITH_NULL_MD5
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x02
TLS_RSA_WITH_NULL_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x03
TLS_RSA_EXPORT_WITH_RC4_40_MD5
RFC4346
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x04
TLS_RSA_WITH_RC4_128_MD5
RFC5246
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x05
TLS_RSA_WITH_RC4_128_SHA
RFC5246
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x06
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x07
TLS_RSA_WITH_IDEA_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x08
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x09
TLS_RSA_WITH_DES_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x0A
TLS_RSA_WITH_3DES_EDE_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x0B
TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x0C
TLS_DH_DSS_WITH_DES_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x0D
TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x0E
TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x0F
TLS_DH_RSA_WITH_DES_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x10
TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x11
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x12
TLS_DHE_DSS_WITH_DES_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x13
TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x14
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x15
TLS_DHE_RSA_WITH_DES_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x16
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x17
TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
RFC4346
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x18
TLS_DH_anon_WITH_RC4_128_MD5
RFC5246
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x19
TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
RFC4346
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x1A
TLS_DH_anon_WITH_DES_CBC_SHA
RFC8996
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x1B
TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x1C-1D
Reserved to avoid conflicts with SSLv3
RFC5246
0x00,0x1E
TLS_KRB5_WITH_DES_CBC_SHA
RFC2712
][
RFC9847
0x00,0x1F
TLS_KRB5_WITH_3DES_EDE_CBC_SHA
RFC2712
0x00,0x20
TLS_KRB5_WITH_RC4_128_SHA
RFC2712
][
RFC6347
][
RFC9847
0x00,0x21
TLS_KRB5_WITH_IDEA_CBC_SHA
RFC2712
][
RFC9847
0x00,0x22
TLS_KRB5_WITH_DES_CBC_MD5
RFC2712
][
RFC9847
0x00,0x23
TLS_KRB5_WITH_3DES_EDE_CBC_MD5
RFC2712
0x00,0x24
TLS_KRB5_WITH_RC4_128_MD5
RFC2712
][
RFC6347
][
RFC9847
0x00,0x25
TLS_KRB5_WITH_IDEA_CBC_MD5
RFC2712
][
RFC9847
0x00,0x26
TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA
RFC2712
][
RFC9847
0x00,0x27
TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA
RFC2712
][
RFC9847
0x00,0x28
TLS_KRB5_EXPORT_WITH_RC4_40_SHA
RFC2712
][
RFC6347
][
RFC9847
0x00,0x29
TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5
RFC2712
][
RFC9847
0x00,0x2A
TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5
RFC2712
][
RFC9847
0x00,0x2B
TLS_KRB5_EXPORT_WITH_RC4_40_MD5
RFC2712
][
RFC6347
][
RFC9847
0x00,0x2C
TLS_PSK_WITH_NULL_SHA
RFC4785
][
RFC9847
0x00,0x2D
TLS_DHE_PSK_WITH_NULL_SHA
RFC4785
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x2E
TLS_RSA_PSK_WITH_NULL_SHA
RFC4785
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x2F
TLS_RSA_WITH_AES_128_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x30
TLS_DH_DSS_WITH_AES_128_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x31
TLS_DH_RSA_WITH_AES_128_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x32
TLS_DHE_DSS_WITH_AES_128_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x33
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x34
TLS_DH_anon_WITH_AES_128_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x35
TLS_RSA_WITH_AES_256_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x36
TLS_DH_DSS_WITH_AES_256_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x37
TLS_DH_RSA_WITH_AES_256_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x38
TLS_DHE_DSS_WITH_AES_256_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x39
TLS_DHE_RSA_WITH_AES_256_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x3A
TLS_DH_anon_WITH_AES_256_CBC_SHA
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x3B
TLS_RSA_WITH_NULL_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x3C
TLS_RSA_WITH_AES_128_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x3D
TLS_RSA_WITH_AES_256_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x3E
TLS_DH_DSS_WITH_AES_128_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x3F
TLS_DH_RSA_WITH_AES_128_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x40
TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x41
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x42
TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x43
TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x44
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x45
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x46
TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x47-4F
Reserved to avoid conflicts with
deployed implementations
Pasi_Eronen
0x00,0x50-58
Reserved to avoid conflicts
[Pasi Eronen, , 2008-04-04. 2008-04-04]
0x00,0x59-5C
Reserved to avoid conflicts with
deployed implementations
Pasi_Eronen
0x00,0x5D-5F
Unassigned
0x00,0x60-66
Reserved to avoid conflicts with
widely deployed implementations
Pasi_Eronen
0x00,0x67
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x68
TLS_DH_DSS_WITH_AES_256_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x69
TLS_DH_RSA_WITH_AES_256_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x6A
TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x6B
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x6C
TLS_DH_anon_WITH_AES_128_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x6D
TLS_DH_anon_WITH_AES_256_CBC_SHA256
RFC5246
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x6E
TLS_ASCONAEAD128_ASCONHASH256
Combining Ascon-AEAD128 with Ascon-Hash256
0x00,0x6F
TLS_ASCONAEAD128_SHA256
][
draft-ietf-tls-rfc8446bis-13
Combining Ascon-AEAD128 with SHA256
0x00,0x70
TLS_AES_128_GCM_ASCONHASH256
][
draft-ietf-tls-rfc8446bis-13
Combining AES128 in GCM mode with Ascon-Hash256
0x00,0x71
TLS_AES_128_CCM_ASCONHASH256
][
draft-ietf-tls-rfc8446bis-13
Combining AES128 in CCM mode with Ascon-Hash256
0x00,0x72-83
Unassigned
0x00,0x84
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x85
TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x86
TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
RFC5932
0x00,0x87
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x88
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x89
TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA
RFC5932
0x00,0x8A
TLS_PSK_WITH_RC4_128_SHA
RFC4279
][
RFC6347
][
RFC9847
0x00,0x8B
TLS_PSK_WITH_3DES_EDE_CBC_SHA
RFC4279
0x00,0x8C
TLS_PSK_WITH_AES_128_CBC_SHA
RFC4279
0x00,0x8D
TLS_PSK_WITH_AES_256_CBC_SHA
RFC4279
0x00,0x8E
TLS_DHE_PSK_WITH_RC4_128_SHA
RFC4279
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x8F
TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
RFC4279
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x90
TLS_DHE_PSK_WITH_AES_128_CBC_SHA
RFC4279
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x91
TLS_DHE_PSK_WITH_AES_256_CBC_SHA
RFC4279
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x92
TLS_RSA_PSK_WITH_RC4_128_SHA
RFC4279
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x93
TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
RFC4279
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x94
TLS_RSA_PSK_WITH_AES_128_CBC_SHA
RFC4279
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x95
TLS_RSA_PSK_WITH_AES_256_CBC_SHA
RFC4279
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x96
TLS_RSA_WITH_SEED_CBC_SHA
RFC4162
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x97
TLS_DH_DSS_WITH_SEED_CBC_SHA
RFC4162
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x98
TLS_DH_RSA_WITH_SEED_CBC_SHA
RFC4162
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x99
TLS_DHE_DSS_WITH_SEED_CBC_SHA
RFC4162
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x9A
TLS_DHE_RSA_WITH_SEED_CBC_SHA
RFC4162
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x9B
TLS_DH_anon_WITH_SEED_CBC_SHA
RFC4162
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x9C
TLS_RSA_WITH_AES_128_GCM_SHA256
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x9D
TLS_RSA_WITH_AES_256_GCM_SHA384
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x9E
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0x9F
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA0
TLS_DH_RSA_WITH_AES_128_GCM_SHA256
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA1
TLS_DH_RSA_WITH_AES_256_GCM_SHA384
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA2
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA3
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA4
TLS_DH_DSS_WITH_AES_128_GCM_SHA256
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA5
TLS_DH_DSS_WITH_AES_256_GCM_SHA384
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA6
TLS_DH_anon_WITH_AES_128_GCM_SHA256
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA7
TLS_DH_anon_WITH_AES_256_GCM_SHA384
RFC5288
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xA8
TLS_PSK_WITH_AES_128_GCM_SHA256
RFC5487
0x00,0xA9
TLS_PSK_WITH_AES_256_GCM_SHA384
RFC5487
0x00,0xAA
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xAB
TLS_DHE_PSK_WITH_AES_256_GCM_SHA384
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xAC
TLS_RSA_PSK_WITH_AES_128_GCM_SHA256
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xAD
TLS_RSA_PSK_WITH_AES_256_GCM_SHA384
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xAE
TLS_PSK_WITH_AES_128_CBC_SHA256
RFC5487
0x00,0xAF
TLS_PSK_WITH_AES_256_CBC_SHA384
RFC5487
0x00,0xB0
TLS_PSK_WITH_NULL_SHA256
RFC5487
][
RFC9847
0x00,0xB1
TLS_PSK_WITH_NULL_SHA384
RFC5487
][
RFC9847
0x00,0xB2
TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB3
TLS_DHE_PSK_WITH_AES_256_CBC_SHA384
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB4
TLS_DHE_PSK_WITH_NULL_SHA256
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB5
TLS_DHE_PSK_WITH_NULL_SHA384
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB6
TLS_RSA_PSK_WITH_AES_128_CBC_SHA256
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB7
TLS_RSA_PSK_WITH_AES_256_CBC_SHA384
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB8
TLS_RSA_PSK_WITH_NULL_SHA256
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xB9
TLS_RSA_PSK_WITH_NULL_SHA384
RFC5487
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xBA
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xBB
TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xBC
TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xBD
TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xBE
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xBF
TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC0
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC1
TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC2
TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC3
TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC4
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC5
TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256
RFC5932
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0x00,0xC6
TLS_SM4_GCM_SM3
RFC8998
0x00,0xC7
TLS_SM4_CCM_SM3
RFC8998
0x00,0xC8-FE
Unassigned
0x00,0xFF
TLS_EMPTY_RENEGOTIATION_INFO_SCSV
RFC5746
0x01-09,*
Unassigned
0x0A,0x00-09
Unassigned
0x0A,0x0A
Reserved
RFC8701
0x0A,0x0B-FF
Unassigned
0x0B-12,*
Unassigned
0x13,0x00
Unassigned
0x13,0x01
TLS_AES_128_GCM_SHA256
RFC-ietf-tls-rfc8446bis-13
0x13,0x02
TLS_AES_256_GCM_SHA384
RFC-ietf-tls-rfc8446bis-13
0x13,0x03
TLS_CHACHA20_POLY1305_SHA256
RFC-ietf-tls-rfc8446bis-13
0x13,0x04
TLS_AES_128_CCM_SHA256
RFC-ietf-tls-rfc8446bis-13
0x13,0x05
TLS_AES_128_CCM_8_SHA256
RFC-ietf-tls-rfc8446bis-13
][
IESG Action 2018-08-16
0x13,0x06
TLS_AEGIS_256_SHA512
draft-irtf-cfrg-aegis-aead-08
0x13,0x07
TLS_AEGIS_128L_SHA256
draft-irtf-cfrg-aegis-aead-08
0x13,0x08-FF
Unassigned
0x14-19,*
Unassigned
0x1A,0x00-19
Unassigned
0x1A,0x1A
Reserved
RFC8701
0x1A,0x1B-FF
Unassigned
0x1B-29,*
Unassigned
0x2A,0x00-29
Unassigned
0x2A,0x2A
Reserved
RFC8701
0x2A,0x2B-FF
Unassigned
0x2B-39,*
Unassigned
0x3A,0x00-39
Unassigned
0x3A,0x3A
Reserved
RFC8701
0x3A,0x3B-FF
Unassigned
0x3B-49,*
Unassigned
0x4A,0x00-49
Unassigned
0x4A,0x4A
Reserved
RFC8701
0x4A,0x4B-FF
Unassigned
0x4B-55,*
Unassigned
0x56,0x00
TLS_FALLBACK_SCSV
RFC7507
0x56,0x01-FF
Unassigned
0x57-59,*
Unassigned
0x5A,0x00-59
Unassigned
0x5A,0x5A
Reserved
RFC8701
0x5A,0x5B-FF
Unassigned
0x5B-69,*
Unassigned
0x6A,0x00-69
Unassigned
0x6A,0x6A
Reserved
RFC8701
0x6A,0x6B-FF
Unassigned
0x6B-79,*
Unassigned
0x7A,0x00-79
Unassigned
0x7A,0x7A
Reserved
RFC8701
0x7A,0x7B-FF
Unassigned
0x7B-89,*
Unassigned
0x8A,0x00-89
Unassigned
0x8A,0x8A
Reserved
RFC8701
0x8A,0x8B-FF
Unassigned
0x8B-99,*
Unassigned
0x9A,0x00-99
Unassigned
0x9A,0x9A
Reserved
RFC8701
0x9A,0x9B-FF
Unassigned
0x9B-A9,*
Unassigned
0xAA,0x00-A9
Unassigned
0xAA,0xAA
Reserved
RFC8701
0xAA,0xAB-FF
Unassigned
0xAB-B9,*
Unassigned
0xBA,0x00-B9
Unassigned
0xBA,0xBA
Reserved
RFC8701
0xBA,0xBB-FF
Unassigned
0xBB-BF,*
Unassigned
0xC0,0x00
Unassigned
0xC0,0x01
TLS_ECDH_ECDSA_WITH_NULL_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x02
TLS_ECDH_ECDSA_WITH_RC4_128_SHA
RFC8422
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x03
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x04
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
RFC8422
0xC0,0x05
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
RFC8422
0xC0,0x06
TLS_ECDHE_ECDSA_WITH_NULL_SHA
RFC8422
][
RFC9847
0xC0,0x07
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
RFC8422
][
RFC6347
][
RFC9847
0xC0,0x08
TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
RFC8422
0xC0,0x09
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
RFC8422
0xC0,0x0A
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
RFC8422
0xC0,0x0B
TLS_ECDH_RSA_WITH_NULL_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x0C
TLS_ECDH_RSA_WITH_RC4_128_SHA
RFC8422
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x0D
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x0E
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x0F
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x10
TLS_ECDHE_RSA_WITH_NULL_SHA
RFC8422
][
RFC9847
0xC0,0x11
TLS_ECDHE_RSA_WITH_RC4_128_SHA
RFC8422
][
RFC6347
][
RFC9847
0xC0,0x12
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
RFC8422
0xC0,0x13
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
RFC8422
0xC0,0x14
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
RFC8422
0xC0,0x15
TLS_ECDH_anon_WITH_NULL_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x16
TLS_ECDH_anon_WITH_RC4_128_SHA
RFC8422
][
RFC6347
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x17
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x18
TLS_ECDH_anon_WITH_AES_128_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x19
TLS_ECDH_anon_WITH_AES_256_CBC_SHA
RFC8422
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x1A
TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA
RFC5054
0xC0,0x1B
TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
RFC5054
0xC0,0x1C
TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
RFC5054
0xC0,0x1D
TLS_SRP_SHA_WITH_AES_128_CBC_SHA
RFC5054
0xC0,0x1E
TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
RFC5054
0xC0,0x1F
TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
RFC5054
0xC0,0x20
TLS_SRP_SHA_WITH_AES_256_CBC_SHA
RFC5054
0xC0,0x21
TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
RFC5054
0xC0,0x22
TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
RFC5054
0xC0,0x23
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
RFC5289
0xC0,0x24
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
RFC5289
0xC0,0x25
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x26
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x27
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
RFC5289
0xC0,0x28
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
RFC5289
0xC0,0x29
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x2A
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x2B
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
RFC5289
0xC0,0x2C
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
RFC5289
0xC0,0x2D
TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x2E
TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x2F
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
RFC5289
0xC0,0x30
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
RFC5289
0xC0,0x31
TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x32
TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
RFC5289
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x33
TLS_ECDHE_PSK_WITH_RC4_128_SHA
RFC5489
][
RFC6347
][
RFC9847
0xC0,0x34
TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
RFC5489
0xC0,0x35
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA
RFC5489
0xC0,0x36
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA
RFC5489
0xC0,0x37
TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256
RFC5489
0xC0,0x38
TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384
RFC5489
0xC0,0x39
TLS_ECDHE_PSK_WITH_NULL_SHA
RFC5489
][
RFC9847
0xC0,0x3A
TLS_ECDHE_PSK_WITH_NULL_SHA256
RFC5489
][
RFC9847
0xC0,0x3B
TLS_ECDHE_PSK_WITH_NULL_SHA384
RFC5489
][
RFC9847
0xC0,0x3C
TLS_RSA_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x3D
TLS_RSA_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x3E
TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x3F
TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x40
TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x41
TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x42
TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x43
TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x44
TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x45
TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x46
TLS_DH_anon_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x47
TLS_DH_anon_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x48
TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256
RFC6209
0xC0,0x49
TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384
RFC6209
0xC0,0x4A
TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x4B
TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x4C
TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256
RFC6209
0xC0,0x4D
TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384
RFC6209
0xC0,0x4E
TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x4F
TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x50
TLS_RSA_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x51
TLS_RSA_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x52
TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x53
TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x54
TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x55
TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x56
TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x57
TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x58
TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x59
TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x5A
TLS_DH_anon_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x5B
TLS_DH_anon_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x5C
TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256
RFC6209
0xC0,0x5D
TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384
RFC6209
0xC0,0x5E
TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x5F
TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x60
TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256
RFC6209
0xC0,0x61
TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384
RFC6209
0xC0,0x62
TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x63
TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x64
TLS_PSK_WITH_ARIA_128_CBC_SHA256
RFC6209
0xC0,0x65
TLS_PSK_WITH_ARIA_256_CBC_SHA384
RFC6209
0xC0,0x66
TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x67
TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x68
TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x69
TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x6A
TLS_PSK_WITH_ARIA_128_GCM_SHA256
RFC6209
0xC0,0x6B
TLS_PSK_WITH_ARIA_256_GCM_SHA384
RFC6209
0xC0,0x6C
TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x6D
TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x6E
TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x6F
TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384
RFC6209
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x70
TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256
RFC6209
0xC0,0x71
TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384
RFC6209
0xC0,0x72
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
0xC0,0x73
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
0xC0,0x74
TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x75
TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x76
TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
0xC0,0x77
TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
0xC0,0x78
TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x79
TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x7A
TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x7B
TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x7C
TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x7D
TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x7E
TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x7F
TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x80
TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x81
TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x82
TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x83
TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x84
TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x85
TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x86
TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
0xC0,0x87
TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
0xC0,0x88
TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x89
TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x8A
TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
0xC0,0x8B
TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
0xC0,0x8C
TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x8D
TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x8E
TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
0xC0,0x8F
TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
0xC0,0x90
TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x91
TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x92
TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x93
TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x94
TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
0xC0,0x95
TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
0xC0,0x96
TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x97
TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x98
TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x99
TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x9A
TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
RFC6367
0xC0,0x9B
TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384
RFC6367
0xC0,0x9C
TLS_RSA_WITH_AES_128_CCM
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x9D
TLS_RSA_WITH_AES_256_CCM
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x9E
TLS_DHE_RSA_WITH_AES_128_CCM
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0x9F
TLS_DHE_RSA_WITH_AES_256_CCM
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA0
TLS_RSA_WITH_AES_128_CCM_8
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA1
TLS_RSA_WITH_AES_256_CCM_8
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA2
TLS_DHE_RSA_WITH_AES_128_CCM_8
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA3
TLS_DHE_RSA_WITH_AES_256_CCM_8
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA4
TLS_PSK_WITH_AES_128_CCM
RFC6655
0xC0,0xA5
TLS_PSK_WITH_AES_256_CCM
RFC6655
0xC0,0xA6
TLS_DHE_PSK_WITH_AES_128_CCM
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA7
TLS_DHE_PSK_WITH_AES_256_CCM
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xA8
TLS_PSK_WITH_AES_128_CCM_8
RFC6655
0xC0,0xA9
TLS_PSK_WITH_AES_256_CCM_8
RFC6655
0xC0,0xAA
TLS_PSK_DHE_WITH_AES_128_CCM_8
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xAB
TLS_PSK_DHE_WITH_AES_256_CCM_8
RFC6655
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xC0,0xAC
TLS_ECDHE_ECDSA_WITH_AES_128_CCM
RFC7251
0xC0,0xAD
TLS_ECDHE_ECDSA_WITH_AES_256_CCM
RFC7251
0xC0,0xAE
TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8
RFC7251
0xC0,0xAF
TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8
RFC7251
0xC0,0xB0
TLS_ECCPWD_WITH_AES_128_GCM_SHA256
RFC8492
0xC0,0xB1
TLS_ECCPWD_WITH_AES_256_GCM_SHA384
RFC8492
0xC0,0xB2
TLS_ECCPWD_WITH_AES_128_CCM_SHA256
RFC8492
0xC0,0xB3
TLS_ECCPWD_WITH_AES_256_CCM_SHA384
RFC8492
0xC0,0xB4
TLS_SHA256_SHA256
RFC9150
][
RFC9847
0xC0,0xB5
TLS_SHA384_SHA384
RFC9150
][
RFC9847
0xC0,0xB6-FF
Unassigned
0xC1,0x00
TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC
RFC9189
0xC1,0x01
TLS_GOSTR341112_256_WITH_MAGMA_CTR_OMAC
RFC9189
0xC1,0x02
TLS_GOSTR341112_256_WITH_28147_CNT_IMIT
RFC9189
0xC1,0x03
TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L
RFC9367
0xC1,0x04
TLS_GOSTR341112_256_WITH_MAGMA_MGM_L
RFC9367
0xC1,0x05
TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_S
RFC9367
0xC1,0x06
TLS_GOSTR341112_256_WITH_MAGMA_MGM_S
RFC9367
0xC1,0x07-FF
Unassigned
0xC2-C9,*
Unassigned
0xCA,0x00-C9
Unassigned
0xCA,0xCA
Reserved
RFC8701
0xCA,0xCB-FF
Unassigned
0xCB,*
Unassigned
0xCC,0x00-A7
Unassigned
0xCC,0xA8
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
RFC7905
0xCC,0xA9
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
RFC7905
0xCC,0xAA
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
RFC7905
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xCC,0xAB
TLS_PSK_WITH_CHACHA20_POLY1305_SHA256
RFC7905
0xCC,0xAC
TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256
RFC7905
0xCC,0xAD
TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256
RFC7905
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xCC,0xAE
TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256
RFC7905
][
RFC-ietf-tls-deprecate-obsolete-kex-08
0xCC,0xAF-FF
Unassigned
0xCD-CF,*
Unassigned
0xD0,0x00
Unassigned
0xD0,0x01
TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256
RFC8442
0xD0,0x02
TLS_ECDHE_PSK_WITH_AES_256_GCM_SHA384
RFC8442
0xD0,0x03
TLS_ECDHE_PSK_WITH_AES_128_CCM_8_SHA256
RFC8442
0xD0,0x04
Unassigned
0xD0,0x05
TLS_ECDHE_PSK_WITH_AES_128_CCM_SHA256
RFC8442
0xD0,0x06-FF
Unassigned
0xD1-D9,*
Unassigned
0xDA,0x00-D9
Unassigned
0xDA,0xDA
Reserved
RFC8701
0xDA,0xDB-FF
Unassigned
0xDB-E9,*
Unassigned
0xEA,0x00-E9
Unassigned
0xEA,0xEA
Reserved
RFC8701
0xEA,0xEB-FF
Unassigned
0xEB-F9,*
Unassigned
0xFA,0x00-C9
Unassigned
0xFA,0xFA
Reserved
RFC8701
0xFA,0xFB-FF
Unassigned
0xFB-FD,*
Unassigned
0xFE,0x00-FD
Unassigned
0xFE,0xFE-FF
Reserved to avoid conflicts with
widely deployed implementations
Pasi_Eronen
0xFF,0x00-FF
Reserved for Private Use
RFC-ietf-tls-rfc8446bis-13
TLS ContentType
Registration Procedure(s)
Standards Action
Reference
RFC-ietf-tls-rfc8446bis-13
][
RFC9443
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Note
The return_routability_check content type is only applicable to DTLS 1.2 and 1.3.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
0-19
Unassigned (Requires coordination; see
RFC9443
])
RFC5764
][
RFC9443
20
change_cipher_spec
RFC-ietf-tls-rfc8446bis-13
21
alert
RFC-ietf-tls-rfc8446bis-13
22
handshake
RFC-ietf-tls-rfc8446bis-13
23
application_data
RFC-ietf-tls-rfc8446bis-13
24
heartbeat
RFC6520
25
tls12_cid
RFC9146
26
ACK
RFC9147
27
return_routability_check
RFC9853
28-31
Unassigned
32-63
Reserved
RFC9147
64-255
Unassigned (Requires coordination; see
RFC9443
])
RFC5764
][
RFC9443
TLS Alerts
Registration Procedure(s)
Standards Action
Reference
RFC-ietf-tls-rfc8446bis-13
][
RFC-ietf-tls-tls12-frozen-08
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
close_notify
RFC-ietf-tls-rfc8446bis-13
][
RFC Errata 7303
1-9
Unassigned
10
unexpected_message
RFC-ietf-tls-rfc8446bis-13
11-19
Unassigned
20
bad_record_mac
RFC-ietf-tls-rfc8446bis-13
21
decryption_failed_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
22
record_overflow
RFC-ietf-tls-rfc8446bis-13
23-29
Unassigned
30
decompression_failure_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
31-39
Unassigned
40
handshake_failure
RFC-ietf-tls-rfc8446bis-13
41
no_certificate_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in SSLv3 but not in TLS.
42
bad_certificate
RFC-ietf-tls-rfc8446bis-13
43
unsupported_certificate
RFC-ietf-tls-rfc8446bis-13
44
certificate_revoked
RFC-ietf-tls-rfc8446bis-13
45
certificate_expired
RFC-ietf-tls-rfc8446bis-13
46
certificate_unknown
RFC-ietf-tls-rfc8446bis-13
47
illegal_parameter
RFC-ietf-tls-rfc8446bis-13
48
unknown_ca
RFC-ietf-tls-rfc8446bis-13
49
access_denied
RFC-ietf-tls-rfc8446bis-13
50
decode_error
RFC-ietf-tls-rfc8446bis-13
51
decrypt_error
RFC-ietf-tls-rfc8446bis-13
52
too_many_cids_requested
RFC9147
53-59
Unassigned
60
export_restriction_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS 1.0 but not TLS 1.1 or later.
61-69
Unassigned
70
protocol_version
RFC-ietf-tls-rfc8446bis-13
71
insufficient_security
RFC-ietf-tls-rfc8446bis-13
72-79
Unassigned
80
internal_error
RFC-ietf-tls-rfc8446bis-13
81-85
Unassigned
86
inappropriate_fallback
RFC7507
87-89
Unassigned
90
user_canceled
RFC-ietf-tls-rfc8446bis-13
91-99
Unassigned
100
no_renegotiation_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
101-108
Unassigned
109
missing_extension
RFC-ietf-tls-rfc8446bis-13
110
unsupported_extension
RFC-ietf-tls-rfc8446bis-13
111
certificate_unobtainable_RESERVED
RFC6066
][
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
112
unrecognized_name
RFC6066
113
bad_certificate_status_response
RFC6066
114
bad_certificate_hash_value_RESERVED
RFC6066
][
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
115
unknown_psk_identity
RFC4279
116
certificate_required
RFC-ietf-tls-rfc8446bis-13
117
general_error
RFC-ietf-tls-rfc8446bis-13
118-119
Unassigned
120
no_application_protocol
RFC7301
][
RFC8447
121
ech_required
RFC9849
122-255
Unassigned
TLS HandshakeType
Registration Procedure(s)
Standards Action
Reference
RFC-ietf-tls-rfc8446bis-13
][
RFC-ietf-tls-tls12-frozen-08
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
hello_request_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
client_hello
RFC-ietf-tls-rfc8446bis-13
server_hello
RFC-ietf-tls-rfc8446bis-13
hello_verify_request_RESERVED
RFC6347
][
RFC-ietf-tls-rfc8446bis-13
Assigned for interim draft, but the functionality was moved to
a different message.
new_session_ticket (renamed from "NewSessionTicket")
RFC4507
][
RFC-ietf-tls-rfc8446bis-13
][
RFC8447
][
RFC Errata 7250
end_of_early_data
RFC-ietf-tls-rfc8446bis-13
hello_retry_request_RESERVED
RFC-ietf-tls-rfc8446bis-13
Assigned for interim draft, but the functionality was moved to an extension.
Unassigned
encrypted_extensions
RFC-ietf-tls-rfc8446bis-13
request_connection_id
RFC9147
10
new_connection_id
RFC9147
11
certificate
RFC-ietf-tls-rfc8446bis-13
12
server_key_exchange_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
13
certificate_request
RFC-ietf-tls-rfc8446bis-13
14
server_hello_done_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
15
certificate_verify
RFC-ietf-tls-rfc8446bis-13
16
client_key_exchange_RESERVED
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
17
client_certificate_request
RFC9261
Used in TLS versions prior to 1.3.
18-19
Unassigned
20
finished
RFC-ietf-tls-rfc8446bis-13
21
certificate_url_RESERVED
RFC6066
][
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
22
certificate_status_RESERVED
RFC6066
][
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
23
supplemental_data_RESERVED
RFC4680
][
RFC-ietf-tls-rfc8446bis-13
Used in TLS versions prior to 1.3.
24
key_update
RFC-ietf-tls-rfc8446bis-13
25
compressed_certificate
RFC8879
26
ekt_key
RFC8870
27-253
Unassigned
254
message_hash
RFC-ietf-tls-rfc8446bis-13
255
Unassigned
TLS Supported Groups
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC8422
][
RFC7919
][
RFC-ietf-tls-rfc8446bis-13
][
RFC8447
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
][
RFC-ietf-tls-hybrid-design-16
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
Renamed from "EC Named Curve Registry"
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Note
The role of the designated expert is described in [
RFC8447
].
The designated expert [
RFC8126
] ensures that the specification is
publicly available. It is sufficient to have an Internet-Draft
(that is posted and never published as an RFC) or a document from
another standards body, industry consortium, university site, etc.
The expert may provide more in-depth reviews, but their approval
should not be taken as an endorsement of the supported group.
WARNING
Cryptographic algorithms and parameters will be broken or
weakened over time. Blindly implementing supported groups
listed here is not advised. Implementers and users need to check
that the cryptographic algorithms listed continue to provide the
expected level of security.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
Note
0-255 ("Recommended" set to/transitioning from "Y" or "D")
Either Standards Action with Expert Review or IESG Approval
0-255 ("Recommended" set to "N," not transitioning from another value)
Specification Required
256-511 ("Recommended" set to/transitioning from "Y" or "D")
Either Standards Action with Expert Review or IESG Approval
Finite Field Diffie-Hellman groups
256-511 ("Recommended" set to "N," not transitioning from another value)
Specification Required
Finite Field Diffie-Hellman groups
512-65535 ("Recommended" set to/transitioning from "Y" or "D")
Either Standards Action with Expert Review or IESG Approval
512-65535 ("Recommended" set to "N," not transitioning from another value)
Specification Required
Value
Description
DTLS-OK
Recommended
Reference
Comment
Reserved
RFC8447
sect163k1
RFC8422
][
RFC9847
sect163r1
RFC8422
][
RFC9847
sect163r2
RFC8422
][
RFC9847
sect193r1
RFC8422
][
RFC9847
sect193r2
RFC8422
][
RFC9847
sect233k1
RFC8422
][
RFC9847
sect233r1
RFC8422
][
RFC9847
sect239k1
RFC8422
][
RFC9847
sect283k1
RFC8422
10
sect283r1
RFC8422
11
sect409k1
RFC8422
12
sect409r1
RFC8422
13
sect571k1
RFC8422
14
sect571r1
RFC8422
15
secp160k1
RFC8422
][
RFC9847
16
secp160r1
RFC8422
][
RFC9847
17
secp160r2
RFC8422
][
RFC9847
18
secp192k1
RFC8422
][
RFC9847
19
secp192r1
RFC8422
][
RFC9847
20
secp224k1
RFC8422
][
RFC9847
21
secp224r1
RFC8422
][
RFC9847
22
secp256k1
RFC8422
23
secp256r1
RFC8422
24
secp384r1
RFC8422
25
secp521r1
RFC8422
26
brainpoolP256r1
RFC7027
27
brainpoolP384r1
RFC7027
28
brainpoolP512r1
RFC7027
29
x25519
RFC-ietf-tls-rfc8446bis-13
][
RFC8422
30
x448
RFC-ietf-tls-rfc8446bis-13
][
RFC8422
31
brainpoolP256r1tls13
RFC8734
32
brainpoolP384r1tls13
RFC8734
33
brainpoolP512r1tls13
RFC8734
34
GC256A
RFC9189
35
GC256B
RFC9189
36
GC256C
RFC9189
37
GC256D
RFC9189
38
GC512A
RFC9189
39
GC512B
RFC9189
40
GC512C
RFC9189
41
curveSM2
RFC8998
42-255
Unassigned
256
ffdhe2048
RFC7919
257
ffdhe3072
RFC7919
258
ffdhe4096
RFC7919
259
ffdhe6144
RFC7919
260
ffdhe8192
RFC7919
261-507
Unassigned
508-511
Reserved for Private Use
RFC7919
512
MLKEM512
draft-connolly-tls-mlkem-key-agreement-05
FIPS 203 version of ML-KEM-512
513
MLKEM768
draft-connolly-tls-mlkem-key-agreement-05
FIPS 203 version of ML-KEM-768
514
MLKEM1024
draft-connolly-tls-mlkem-key-agreement-05
FIPS 203 version of ML-KEM-1024
515-2569
Unassigned
2570
Reserved
RFC8701
2571-4586
Unassigned
4587
SecP256r1MLKEM768
RFC-ietf-tls-ecdhe-mlkem-04
Combining secp256r1 ECDH with ML-KEM-768
4588
X25519MLKEM768
RFC-ietf-tls-ecdhe-mlkem-04
Combining X25519 ECDH with ML-KEM-768
4589
SecP384r1MLKEM1024
RFC-ietf-tls-ecdhe-mlkem-04
Combining secp384r1 ECDH with ML-KEM-1024
4590
curveSM2MLKEM768
draft-yang-tls-hybrid-sm2-mlkem-03
Combining SM2 ECDH with ML-KEM-768
4591-6681
Unassigned
6682
Reserved
RFC8701
6683-10793
Unassigned
10794
Reserved
RFC8701
10795-14905
Unassigned
14906
Reserved
RFC8701
14907-19017
Unassigned
19018
Reserved
RFC8701
19019-23129
Unassigned
23130
Reserved
RFC8701
23131-25496
Unassigned
25497
X25519Kyber768Draft00 (OBSOLETE)
draft-tls-westerbaan-xyber768d00-02
][
RFC-ietf-tls-ecdhe-mlkem-04
Pre-standards version of Kyber768. Obsoleted by [
RFC-ietf-tls-ecdhe-mlkem-04
].
25498
SecP256r1Kyber768Draft00 (OBSOLETE)
draft-kwiatkowski-tls-ecdhe-kyber-01
][
RFC-ietf-tls-ecdhe-mlkem-04
Pre-standards version of Kyber768. Obsoleted by [
RFC-ietf-tls-ecdhe-mlkem-04
].
25499-27241
Unassigned
27242
Reserved
RFC8701
27243-31353
Unassigned
31354
Reserved
RFC8701
31355-35465
Unassigned
35466
Reserved
RFC8701
35467-39577
Unassigned
39578
Reserved
RFC8701
39579-43689
Unassigned
43690
Reserved
RFC8701
43691-47801
Unassigned
47802
Reserved
RFC8701
47803-51913
Unassigned
51914
Reserved
RFC8701
51915-56025
Unassigned
56026
Reserved
RFC8701
56027-60137
Unassigned
60138
Reserved
RFC8701
60139-64249
Unassigned
64250
Reserved
RFC8701
64251-65023
Unassigned
65024-65279
Reserved for Private Use
RFC8422
65280
Unassigned
65281
arbitrary_explicit_prime_curves
RFC8422
65282
arbitrary_explicit_char2_curves
RFC8422
65283-65535
Unassigned
TLS EC Point Formats
Registration Procedure(s)
Specification Required
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC8422
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
uncompressed
RFC8422
ansiX962_compressed_prime
RFC8422
ansiX962_compressed_char2
RFC8422
3-247
Unassigned
248-255
Reserved for Private Use
RFC8422
TLS EC Curve Types
Registration Procedure(s)
Specification Required
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC8422
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
Unassigned
explicit_prime
RFC8422
explicit_char2
RFC8422
named_curve
RFC8422
4-247
Unassigned
248-255
Reserved for Private Use
RFC8422
TLS Supplemental Data Formats (SupplementalDataType)
Reference
RFC4680
][
RFC8447
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
0-16385
Standards Action
16386-65279
IETF Review
65280-65535
Reserved for Private Use
Value
Description
DTLS-OK
Reference
Comment
user_mapping_data
RFC4681
1-16385
Unassigned
16386
authz_data
RFC5878
16387-65279
Unassigned
65280-65535
Reserved for Private Use
RFC4680
TLS UserMappingType Values
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC4681
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Requests for registration in the "Specification Required" [
RFC8126
range should be sent to iana@iana.org or submitted via IANA's
application form
], per [
RFC9847
]. IANA will
forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
0-63
Standards Action
64-223
Specification Required
224-255
Reserved for Private Use
Value
Description
DTLS-OK
Reference
Comment
0-63
Unassigned
64
upn_domain_hint
RFC4681
65-223
Unassigned
224-255
Reserved for Private Use
RFC4681
TLS SignatureAlgorithm
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC5246
][
RFC8447
][
RFC9155
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
The values in this registry are only applicable to (D)TLS
protocol versions prior to 1.3. (D)TLS 1.3 and later versions'
values are registered in the TLS SignatureScheme registry.
WARNING
Cryptographic algorithms and parameters will be broken or
weakened over time. Blindly implementing the cryptographic
algorithms listed here is not advised. Implementers and users need
to check that the cryptographic algorithms listed continue to
provide the expected level of security.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Available Formats
CSV
Range
Registration Procedures
0-223 ("Recommended" set to/transitioning from "Y" or "D")
Either Standards Action with Expert Review or IESG Approval
0-223 ("Recommended" set to "N," not transitioning from another value)
Specification Required
224-255
Reserved for Private Use
Value
Description
DTLS-OK
Recommended
Reference
Comment
anonymous
RFC5246
][
RFC9847
rsa
RFC5246
][
RFC9847
dsa
RFC5246
][
RFC9847
ecdsa
RFC5246
][
RFC9847
4-6
Reserved
RFC8447
ed25519
RFC8422
][
RFC9847
ed448
RFC8422
][
RFC9847
9-63
Reserved
RFC8447
64
gostr34102012_256
][
RFC9189
][
RFC9847
65
gostr34102012_512
][
RFC9189
][
RFC9847
66-223
Reserved
RFC8447
224-255
Reserved for Private Use
RFC5246
TLS HashAlgorithm
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC5246
][
RFC8447
][
RFC9155
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
The values in this registry are only applicable to (D)TLS
protocol versions prior to 1.3. (D)TLS 1.3 and later versions'
values are registered in the TLS SignatureScheme registry.
WARNING
Cryptographic algorithms and parameters will be broken or
weakened over time. Blindly implementing the cryptographic
algorithms listed here is not advised. Implementers and users need
to check that the cryptographic algorithms listed continue to
provide the expected level of security.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Available Formats
CSV
Range
Registration Procedures
0-223 ("Recommended" set to/transitioning from "Y" or "D")
Either Standards Action with Expert Review or IESG Approval
0-223 ("Recommended" set to "N," not transitioning from another value)
Specification Required
224-255
Reserved for Private Use
Value
Description
DTLS-OK
Recommended
Reference
Comment
none
RFC5246
][
RFC9847
md5
RFC5246
][
RFC9847
sha1
RFC5246
][
RFC9847
sha224
RFC5246
][
RFC9847
sha256
RFC5246
][
RFC9847
sha384
RFC5246
][
RFC9847
sha512
RFC5246
][
RFC9847
Reserved
RFC8447
Intrinsic
RFC8422
][
RFC9847
9-223
Reserved
RFC8447
224-255
Reserved for Private Use
RFC5246
TLS Exporter Labels
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC5705
][
RFC8447
][
RFC9847
Note
If the "Expert Review" [
RFC8126
] procedure applies, registration
requests can be sent to iana@iana.org or submitted via IANA's
application form
], per [
RFC9847
]. IANA will
forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
(1) These entries are reserved and MUST NOT be used for the
purpose described in [
RFC5705
], in order to avoid confusion
with similar, but distinct use in [
RFC5246
].
Note
RFC5705
] defines keying material exporters for TLS in terms
of the TLS PRF. [
RFC-ietf-tls-rfc8446bis-13
] replaced the PRF with HKDF,
thus requiring a new construction. The exporter interface remains
the same; however, the value is computed differently.
Note
The role of the designated expert is described in
RFC 8447, Section 17
]. Even though this registry does not require a
specification, the designated expert [
RFC8126
] will strongly
encourage registrants to provide a link to a publicly available
specification. An Internet-Draft (that is posted and never published
as an RFC) or a document from another standards body, industry
consortium, university site, etc. are suitable for these purposes.
The expert may provide more in-depth reviews, but their approval
should not be taken as an endorsement of the exporter label. The
expert also verifies that the label is a string consisting of
printable ASCII characters beginning with "EXPORTER". IANA MUST also
verify that one label is not a prefix of any other label. For
example, labels "key" or "master secretary" are forbidden.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Available Formats
CSV
Range
Registration Procedures
"Recommended" set to/transitioning from "Y" or "D"
Either Standards Action With Expert Review or IESG Approval
"Recommended" set to "N," not transitioning from another value
Expert Review
Value
DTLS-OK
Recommended
Reference
Comment
client finished
RFC5246
(1)
server finished
RFC5246
(1)
master secret
RFC5246
(1)
key expansion
RFC5246
(1)
client EAP encryption
RFC5216
][
RFC6347
ttls keying material
RFC5281
][
RFC6347
ttls challenge
RFC5281
][
RFC6347
EXTRACTOR-dtls_srtp
RFC5764
EXPORTER_DTLS_OVER_SCTP
RFC6083
EXPORTER-ETSI-TC-M2M-Bootstrap
[TS 102 921 v2.0.3][
Miguel_Angel_Reina_Ortega
EXPORTER-ETSI-TC-M2M-Connection
[TS 102 921 v2.0.3][
Miguel_Angel_Reina_Ortega
TLS_MK_Extr
TR 33.222
][
Silke_Holtmanns
EXPORTER_GBA_Digest
TS 33.220 Annex M.6
][
Silke_Holtmanns
EXPORTER: teap session key seed
RFC9930
EXPORTER-oneM2M-Bootstrap
oneM2M Security Solutions
][
Miguel_Angel_Reina_Ortega
EXPORTER-oneM2M-Connection
oneM2M Security Solutions
][
Miguel_Angel_Reina_Ortega
EXPORTER-oneM2M-ESCertKE
oneM2M Security Solutions
][
Miguel_Angel_Reina_Ortega
EXPORTER-Token-Binding
RFC8471
EXPORTER-BBF-Dying-Gasp
TR-301 Issue 2 Amendment 1
EXPORTER-network-time-security
RFC8915, Section 4.3
EXPORTER_3GPP_N32_MASTER
3GPP TS 33.501
EXPORTER-ACE-MQTT-Sign-Challenge
RFC9431
EXPORTER_EAP_TLS_Key_Material
RFC9190
EXPORTER_EAP_TLS_Method-Id
RFC9190
EXPORTER-BBF-USP-Record
TR-369
][
Broadband_Forum
EXPORTER-client authenticator handshake context
RFC9261
EXPORTER-server authenticator handshake context
RFC9261
EXPORTER-client authenticator finished key
RFC9261
EXPORTER-server authenticator finished key
RFC9261
EXPORTER-Channel-Binding
RFC9266
EXPORTER: teap session key seed
RFC9427
EXPORTER: Inner Methods Compound Keys
RFC9427
EXPORTER: Session Key Generating Function
RFC9427
EXPORTER: Extended Session Key Generating Function
RFC9427
TEAPbindkey@ietf.org
RFC9427
EXPORTER-HTTP-Concealed-Authentication
RFC9729
EXPORTER_3GPP_MRI_AESCCM_8
Clause 18.2.5 of 3GPP TS 33.501
][
_3GPP_Specifications_Manager
EXPORTER-ACE-Pop-Input-coap-group-oscore-app
RFC-ietf-ace-key-groupcomm-oscore-21
TLS Authorization Data Formats
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC5878
][
RFC8447
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Requests for registration in the "Specification Required" [
RFC8126
range should be sent to iana@iana.org or submitted via IANA's
application form
], per [
RFC9847
]. IANA will
forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
0-63
IETF Review
64-223
Specification Required
224-255
Reserved for Private Use
Value
Description
DTLS-OK
Reference
Comment
x509_attr_cert
RFC5878
saml_assertion
RFC5878
x509_attr_cert_url
RFC5878
saml_assertion_url
RFC5878
4-63
Unassigned
64
keynote_assertion_list
RFC6042
65
keynote_assertion_list_url
RFC6042
66
dtcp_authorization
RFC7562
67-223
Unassigned
224-255
Reserved for Private Use
RFC5878
TLS Heartbeat Message Types
Registration Procedure(s)
Expert Review
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC6520
][
RFC8447
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
Reserved
RFC6520
heartbeat_request
RFC6520
heartbeat_response
RFC6520
3-254
Unassigned
255
Reserved
RFC6520
TLS Heartbeat Modes
Registration Procedure(s)
Expert Review
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC6520
][
RFC8447
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Value
Description
DTLS-OK
Reference
Comment
Reserved
RFC6520
peer_allowed_to_send
RFC6520
peer_not_allowed_to_send
RFC6520
3-254
Unassigned
255
Reserved
RFC6520
TLS SignatureScheme
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC-ietf-tls-rfc8446bis-13
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
WARNING
Cryptographic algorithms and parameters will be broken or
weakened over time. Blindly implementing signature schemes
listed here is not advised. Implementers and users need to check
that the cryptographic algorithms listed continue to provide the
expected level of security.
Note
As specified in [
RFC8126
], assignments made in the Private Use
space are not generally useful for broad interoperability. It is
the responsibility of those making use of the Private Use range to
ensure that no conflicts occur (within the intended scope of use).
For widespread experiments, temporary reservations are available.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Available Formats
CSV
Range
Registration Procedures
"Recommended" set to/transitioning from "Y" or "D"
Either Standards Action With Expert Review or IESG Approval
"Recommended" set to "N," not transitioning from another value
Specification Required
Value
Description
Recommended
Reference
Comment
0x0000-0x0200
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0201
rsa_pkcs1_sha1
RFC-ietf-tls-rfc8446bis-13
][
RFC9155
0x0202
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0203
ecdsa_sha1
RFC-ietf-tls-rfc8446bis-13
][
RFC9155
0x0204-0x0400
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0401
rsa_pkcs1_sha256
RFC-ietf-tls-rfc8446bis-13
0x0402
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0403
ecdsa_secp256r1_sha256
RFC-ietf-tls-rfc8446bis-13
0x0404-0x041F
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0420
rsa_pkcs1_sha256_legacy
RFC-ietf-tls-tls13-pkcs1-07
0x0421-0x0500
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0501
rsa_pkcs1_sha384
RFC-ietf-tls-rfc8446bis-13
0x0502
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0503
ecdsa_secp384r1_sha384
RFC-ietf-tls-rfc8446bis-13
0x0504-0x051F
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0520
rsa_pkcs1_sha384_legacy
RFC-ietf-tls-tls13-pkcs1-07
0x0521-0x0600
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0601
rsa_pkcs1_sha512
RFC-ietf-tls-rfc8446bis-13
0x0602
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0603
ecdsa_secp521r1_sha512
RFC-ietf-tls-rfc8446bis-13
0x0604-0x061F
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0620
rsa_pkcs1_sha512_legacy
RFC-ietf-tls-tls13-pkcs1-07
0x0621-0x0703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0704
eccsi_sha256
draft-wang-tls-raw-public-key-with-ibc-02
0x0705
iso_ibs1
draft-wang-tls-raw-public-key-with-ibc-02
0x0706
iso_ibs2
draft-wang-tls-raw-public-key-with-ibc-02
0x0707
iso_chinese_ibs
draft-wang-tls-raw-public-key-with-ibc-02
0x0708
sm2sig_sm3
RFC8998
0x0709
gostr34102012_256a
RFC9367
0x070A
gostr34102012_256b
RFC9367
0x070B
gostr34102012_256c
RFC9367
0x070C
gostr34102012_256d
RFC9367
0x070D
gostr34102012_512a
RFC9367
0x070E
gostr34102012_512b
RFC9367
0x070F
gostr34102012_512c
RFC9367
0x0710-0x07FF
Unassigned
0x0800-0x0803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0804
rsa_pss_rsae_sha256
RFC-ietf-tls-rfc8446bis-13
0x0805
rsa_pss_rsae_sha384
RFC-ietf-tls-rfc8446bis-13
0x0806
rsa_pss_rsae_sha512
RFC-ietf-tls-rfc8446bis-13
0x0807
ed25519
RFC-ietf-tls-rfc8446bis-13
0x0808
ed448
RFC-ietf-tls-rfc8446bis-13
0x0809
rsa_pss_pss_sha256
RFC-ietf-tls-rfc8446bis-13
0x080A
rsa_pss_pss_sha384
RFC-ietf-tls-rfc8446bis-13
0x080B
rsa_pss_pss_sha512
RFC-ietf-tls-rfc8446bis-13
0x080C-0x0819
Unassigned
0x081A
ecdsa_brainpoolP256r1tls13_sha256
RFC8734
0x081B
ecdsa_brainpoolP384r1tls13_sha384
RFC8734
0x081C
ecdsa_brainpoolP512r1tls13_sha512
RFC8734
0x081D-0x083F
Unassigned
0x0840
Reserved for backward compatibility
RFC9189
0x0841
Reserved for backward compatibility
RFC9189
0x0842-0x08FF
Unassigned
0x0900-0x0903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0904
mldsa44
draft-ietf-tls-mldsa-00
0x0905
mldsa65
draft-ietf-tls-mldsa-00
0x0906
mldsa87
draft-ietf-tls-mldsa-00
0x0907-0x0910
Unassigned
0x0911
slhdsa_sha2_128s
draft-reddy-tls-slhdsa-01
0x0912
slhdsa_sha2_128f
draft-reddy-tls-slhdsa-01
0x0913
slhdsa_sha2_192s
draft-reddy-tls-slhdsa-01
0x0914
slhdsa_sha2_192f
draft-reddy-tls-slhdsa-01
0x0915
slhdsa_sha2_256s
draft-reddy-tls-slhdsa-01
0x0916
slhdsa_sha2_256f
draft-reddy-tls-slhdsa-01
0x0917
slhdsa_shake_128s
draft-reddy-tls-slhdsa-01
0x0918
slhdsa_shake_128f
draft-reddy-tls-slhdsa-01
0x0919
slhdsa_shake_192s
draft-reddy-tls-slhdsa-01
0x091A
slhdsa_shake_192f
draft-reddy-tls-slhdsa-01
0x091B
slhdsa_shake_256s
draft-reddy-tls-slhdsa-01
0x091C
slhdsa_shake_256f
draft-reddy-tls-slhdsa-01
0x091D-0x09FF
Unassigned
0x0A00-0x0A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0A04-0x0AFF
Unassigned
0x0B00-0x0B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0B04-0x0BFF
Unassigned
0x0C00-0x0C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0C04-0x0CFF
Unassigned
0x0D00-0x0D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0D04-0x0DFF
Unassigned
0x0E00-0x0E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0E04-0x0EFF
Unassigned
0x0F00-0x0F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x0F04-0x0FFF
Unassigned
0x1000-0x1003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1004-0x10FF
Unassigned
0x1100-0x1103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1104-0x11FF
Unassigned
0x1200-0x1203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1204-0x12FF
Unassigned
0x1300-0x1303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1304-0x13FF
Unassigned
0x1400-0x1403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1404-0x14FF
Unassigned
0x1500-0x1503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1504-0x15FF
Unassigned
0x1600-0x1603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1604-0x16FF
Unassigned
0x1700-0x1703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1704-0x17FF
Unassigned
0x1800-0x1803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1804-0x18FF
Unassigned
0x1900-0x1903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1904-0x19FF
Unassigned
0x1A00-0x1A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1A04-0x1AFF
Unassigned
0x1B00-0x1B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1B04-0x1BFF
Unassigned
0x1C00-0x1C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1C04-0x1CFF
Unassigned
0x1D00-0x1D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1D04-0x1DFF
Unassigned
0x1E00-0x1E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1E04-0x1EFF
Unassigned
0x1F00-0x1F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x1F04-0x1FFF
Unassigned
0x2000-0x2003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2004-0x20FF
Unassigned
0x2100-0x2103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2104-0x21FF
Unassigned
0x2200-0x2203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2204-0x22FF
Unassigned
0x2300-0x2303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2304-0x23FF
Unassigned
0x2400-0x2403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2404-0x24FF
Unassigned
0x2500-0x2503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2504-0x25FF
Unassigned
0x2600-0x2603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2604-0x26FF
Unassigned
0x2700-0x2703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2704-0x27FF
Unassigned
0x2800-0x2803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2804-0x28FF
Unassigned
0x2900-0x2903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2904-0x29FF
Unassigned
0x2A00-0x2A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2A04-0x2AFF
Unassigned
0x2B00-0x2B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2B04-0x2BFF
Unassigned
0x2C00-0x2C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2C04-0x2CFF
Unassigned
0x2D00-0x2D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2D04-0x2DFF
Unassigned
0x2E00-0x2E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2E04-0x2EFF
Unassigned
0x2F00-0x2F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x2F04-0x2FFF
Unassigned
0x3000-0x3003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3004-0x30FF
Unassigned
0x3100-0x3103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3104-0x31FF
Unassigned
0x3200-0x3203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3204-0x32FF
Unassigned
0x3300-0x3303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3304-0x33FF
Unassigned
0x3400-0x3403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3404-0x34FF
Unassigned
0x3500-0x3503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3504-0x35FF
Unassigned
0x3600-0x3603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3604-0x36FF
Unassigned
0x3700-0x3703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3704-0x37FF
Unassigned
0x3800-0x3803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3804-0x38FF
Unassigned
0x3900-0x3903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3904-0x39FF
Unassigned
0x3A00-0x3A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3A04-0x3AFF
Unassigned
0x3B00-0x3B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3B04-0x3BFF
Unassigned
0x3C00-0x3C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3C04-0x3CFF
Unassigned
0x3D00-0x3D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3D04-0x3DFF
Unassigned
0x3E00-0x3E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3E04-0x3EFF
Unassigned
0x3F00-0x3F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x3F04-0x3FFF
Unassigned
0x4000-0x4003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4004-0x40FF
Unassigned
0x4100-0x4103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4104-0x41FF
Unassigned
0x4200-0x4203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4204-0x42FF
Unassigned
0x4300-0x4303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4304-0x43FF
Unassigned
0x4400-0x4403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4404-0x44FF
Unassigned
0x4500-0x4503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4504-0x45FF
Unassigned
0x4600-0x4603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4604-0x46FF
Unassigned
0x4700-0x4703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4704-0x47FF
Unassigned
0x4800-0x4803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4804-0x48FF
Unassigned
0x4900-0x4903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4904-0x49FF
Unassigned
0x4A00-0x4A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4A04-0x4AFF
Unassigned
0x4B00-0x4B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4B04-0x4BFF
Unassigned
0x4C00-0x4C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4C04-0x4CFF
Unassigned
0x4D00-0x4D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4D04-0x4DFF
Unassigned
0x4E00-0x4E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4E04-0x4EFF
Unassigned
0x4F00-0x4F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x4F04-0x4FFF
Unassigned
0x5000-0x5003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5004-0x50FF
Unassigned
0x5100-0x5103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5104-0x51FF
Unassigned
0x5200-0x5203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5204-0x52FF
Unassigned
0x5300-0x5303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5304-0x53FF
Unassigned
0x5400-0x5403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5404-0x54FF
Unassigned
0x5500-0x5503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5504-0x55FF
Unassigned
0x5600-0x5603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5604-0x56FF
Unassigned
0x5700-0x5703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5704-0x57FF
Unassigned
0x5800-0x5803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5804-0x58FF
Unassigned
0x5900-0x5903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5904-0x59FF
Unassigned
0x5A00-0x5A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5A04-0x5AFF
Unassigned
0x5B00-0x5B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5B04-0x5BFF
Unassigned
0x5C00-0x5C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5C04-0x5CFF
Unassigned
0x5D00-0x5D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5D04-0x5DFF
Unassigned
0x5E00-0x5E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5E04-0x5EFF
Unassigned
0x5F00-0x5F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x5F04-0x5FFF
Unassigned
0x6000-0x6003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6004-0x60FF
Unassigned
0x6100-0x6103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6104-0x61FF
Unassigned
0x6200-0x6203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6204-0x62FF
Unassigned
0x6300-0x6303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6304-0x63FF
Unassigned
0x6400-0x6403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6404-0x64FF
Unassigned
0x6500-0x6503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6504-0x65FF
Unassigned
0x6600-0x6603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6604-0x66FF
Unassigned
0x6700-0x6703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6704-0x67FF
Unassigned
0x6800-0x6803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6804-0x68FF
Unassigned
0x6900-0x6903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6904-0x69FF
Unassigned
0x6A00-0x6A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6A04-0x6AFF
Unassigned
0x6B00-0x6B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6B04-0x6BFF
Unassigned
0x6C00-0x6C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6C04-0x6CFF
Unassigned
0x6D00-0x6D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6D04-0x6DFF
Unassigned
0x6E00-0x6E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6E04-0x6EFF
Unassigned
0x6F00-0x6F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x6F04-0x6FFF
Unassigned
0x7000-0x7003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7004-0x70FF
Unassigned
0x7100-0x7103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7104-0x71FF
Unassigned
0x7200-0x7203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7204-0x72FF
Unassigned
0x7300-0x7303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7304-0x73FF
Unassigned
0x7400-0x7403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7404-0x74FF
Unassigned
0x7500-0x7503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7504-0x75FF
Unassigned
0x7600-0x7603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7604-0x76FF
Unassigned
0x7700-0x7703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7704-0x77FF
Unassigned
0x7800-0x7803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7804-0x78FF
Unassigned
0x7900-0x7903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7904-0x79FF
Unassigned
0x7A00-0x7A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7A04-0x7AFF
Unassigned
0x7B00-0x7B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7B04-0x7BFF
Unassigned
0x7C00-0x7C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7C04-0x7CFF
Unassigned
0x7D00-0x7D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7D04-0x7DFF
Unassigned
0x7E00-0x7E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7E04-0x7EFF
Unassigned
0x7F00-0x7F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x7F04-0x7FFF
Unassigned
0x8000-0x8003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8004-0x80FF
Unassigned
0x8100-0x8103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8104-0x81FF
Unassigned
0x8200-0x8203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8204-0x82FF
Unassigned
0x8300-0x8303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8304-0x83FF
Unassigned
0x8400-0x8403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8404-0x84FF
Unassigned
0x8500-0x8503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8504-0x85FF
Unassigned
0x8600-0x8603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8604-0x86FF
Unassigned
0x8700-0x8703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8704-0x87FF
Unassigned
0x8800-0x8803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8804-0x88FF
Unassigned
0x8900-0x8903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8904-0x89FF
Unassigned
0x8A00-0x8A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8A04-0x8AFF
Unassigned
0x8B00-0x8B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8B04-0x8BFF
Unassigned
0x8C00-0x8C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8C04-0x8CFF
Unassigned
0x8D00-0x8D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8D04-0x8DFF
Unassigned
0x8E00-0x8E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8E04-0x8EFF
Unassigned
0x8F00-0x8F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x8F04-0x8FFF
Unassigned
0x9000-0x9003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9004-0x90FF
Unassigned
0x9100-0x9103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9104-0x91FF
Unassigned
0x9200-0x9203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9204-0x92FF
Unassigned
0x9300-0x9303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9304-0x93FF
Unassigned
0x9400-0x9403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9404-0x94FF
Unassigned
0x9500-0x9503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9504-0x95FF
Unassigned
0x9600-0x9603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9604-0x96FF
Unassigned
0x9700-0x9703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9704-0x97FF
Unassigned
0x9800-0x9803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9804-0x98FF
Unassigned
0x9900-0x9903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9904-0x99FF
Unassigned
0x9A00-0x9A03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9A04-0x9AFF
Unassigned
0x9B00-0x9B03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9B04-0x9BFF
Unassigned
0x9C00-0x9C03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9C04-0x9CFF
Unassigned
0x9D00-0x9D03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9D04-0x9DFF
Unassigned
0x9E00-0x9E03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9E04-0x9EFF
Unassigned
0x9F00-0x9F03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0x9F04-0x9FFF
Unassigned
0xA000-0xA003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA004-0xA0FF
Unassigned
0xA100-0xA103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA104-0xA1FF
Unassigned
0xA200-0xA203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA204-0xA2FF
Unassigned
0xA300-0xA303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA304-0xA3FF
Unassigned
0xA400-0xA403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA404-0xA4FF
Unassigned
0xA500-0xA503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA504-0xA5FF
Unassigned
0xA600-0xA603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA604-0xA6FF
Unassigned
0xA700-0xA703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA704-0xA7FF
Unassigned
0xA800-0xA803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA804-0xA8FF
Unassigned
0xA900-0xA903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xA904-0xA9FF
Unassigned
0xAA00-0xAA03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xAA04-0xAAFF
Unassigned
0xAB00-0xAB03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xAB04-0xABFF
Unassigned
0xAC00-0xAC03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xAC04-0xACFF
Unassigned
0xAD00-0xAD03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xAD04-0xADFF
Unassigned
0xAE00-0xAE03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xAE04-0xAEFF
Unassigned
0xAF00-0xAF03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xAF04-0xAFFF
Unassigned
0xB000-0xB003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB004-0xB0FF
Unassigned
0xB100-0xB103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB104-0xB1FF
Unassigned
0xB200-0xB203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB204-0xB2FF
Unassigned
0xB300-0xB303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB304-0xB3FF
Unassigned
0xB400-0xB403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB404-0xB4FF
Unassigned
0xB500-0xB503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB504-0xB5FF
Unassigned
0xB600-0xB603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB604-0xB6FF
Unassigned
0xB700-0xB703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB704-0xB7FF
Unassigned
0xB800-0xB803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB804-0xB8FF
Unassigned
0xB900-0xB903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xB904-0xB9FF
Unassigned
0xBA00-0xBA03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xBA04-0xBAFF
Unassigned
0xBB00-0xBB03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xBB04-0xBBFF
Unassigned
0xBC00-0xBC03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xBC04-0xBCFF
Unassigned
0xBD00-0xBD03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xBD04-0xBDFF
Unassigned
0xBE00-0xBE03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xBE04-0xBEFF
Unassigned
0xBF00-0xBF03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xBF04-0xBFFF
Unassigned
0xC000-0xC003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC004-0xC0FF
Unassigned
0xC100-0xC103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC104-0xC1FF
Unassigned
0xC200-0xC203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC204-0xC2FF
Unassigned
0xC300-0xC303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC304-0xC3FF
Unassigned
0xC400-0xC403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC404-0xC4FF
Unassigned
0xC500-0xC503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC504-0xC5FF
Unassigned
0xC600-0xC603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC604-0xC6FF
Unassigned
0xC700-0xC703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC704-0xC7FF
Unassigned
0xC800-0xC803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC804-0xC8FF
Unassigned
0xC900-0xC903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xC904-0xC9FF
Unassigned
0xCA00-0xCA03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xCA04-0xCAFF
Unassigned
0xCB00-0xCB03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xCB04-0xCBFF
Unassigned
0xCC00-0xCC03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xCC04-0xCCFF
Unassigned
0xCD00-0xCD03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xCD04-0xCDFF
Unassigned
0xCE00-0xCE03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xCE04-0xCEFF
Unassigned
0xCF00-0xCF03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xCF04-0xCFFF
Unassigned
0xD000-0xD003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD004-0xD0FF
Unassigned
0xD100-0xD103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD104-0xD1FF
Unassigned
0xD200-0xD203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD204-0xD2FF
Unassigned
0xD300-0xD303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD304-0xD3FF
Unassigned
0xD400-0xD403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD404-0xD4FF
Unassigned
0xD500-0xD503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD504-0xD5FF
Unassigned
0xD600-0xD603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD604-0xD6FF
Unassigned
0xD700-0xD703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD704-0xD7FF
Unassigned
0xD800-0xD803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD804-0xD8FF
Unassigned
0xD900-0xD903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xD904-0xD9FF
Unassigned
0xDA00-0xDA03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xDA04-0xDAFF
Unassigned
0xDB00-0xDB03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xDB04-0xDBFF
Unassigned
0xDC00-0xDC03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xDC04-0xDCFF
Unassigned
0xDD00-0xDD03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xDD04-0xDDFF
Unassigned
0xDE00-0xDE03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xDE04-0xDEFF
Unassigned
0xDF00-0xDF03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xDF04-0xDFFF
Unassigned
0xE000-0xE003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE004-0xE0FF
Unassigned
0xE100-0xE103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE104-0xE1FF
Unassigned
0xE200-0xE203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE204-0xE2FF
Unassigned
0xE300-0xE303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE304-0xE3FF
Unassigned
0xE400-0xE403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE404-0xE4FF
Unassigned
0xE500-0xE503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE504-0xE5FF
Unassigned
0xE600-0xE603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE604-0xE6FF
Unassigned
0xE700-0xE703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE704-0xE7FF
Unassigned
0xE800-0xE803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE804-0xE8FF
Unassigned
0xE900-0xE903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xE904-0xE9FF
Unassigned
0xEA00-0xEA03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xEA04-0xEAFF
Unassigned
0xEB00-0xEB03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xEB04-0xEBFF
Unassigned
0xEC00-0xEC03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xEC04-0xECFF
Unassigned
0xED00-0xED03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xED04-0xEDFF
Unassigned
0xEE00-0xEE03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xEE04-0xEEFF
Unassigned
0xEF00-0xEF03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xEF04-0xEFFF
Unassigned
0xF000-0xF003
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF004-0xF0FF
Unassigned
0xF100-0xF103
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF104-0xF1FF
Unassigned
0xF200-0xF203
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF204-0xF2FF
Unassigned
0xF300-0xF303
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF304-0xF3FF
Unassigned
0xF400-0xF403
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF404-0xF4FF
Unassigned
0xF500-0xF503
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF504-0xF5FF
Unassigned
0xF600-0xF603
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF604-0xF6FF
Unassigned
0xF700-0xF703
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF704-0xF7FF
Unassigned
0xF800-0xF803
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF804-0xF8FF
Unassigned
0xF900-0xF903
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xF904-0xF9FF
Unassigned
0xFA00-0xFA03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xFA04-0xFAFF
Unassigned
0xFB00-0xFB03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xFB04-0xFBFF
Unassigned
0xFC00-0xFC03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xFC04-0xFCFF
Unassigned
0xFD00-0xFD03
Reserved for backward compatibility
RFC-ietf-tls-rfc8446bis-13
0xFD04-0xFDFF
Unassigned
0xFE00-0xFFFF
Reserved for Private Use
RFC-ietf-tls-rfc8446bis-13
TLS PskKeyExchangeMode
Expert(s)
Yoav Nir, Rich Salz, Nick Sullivan
Reference
RFC-ietf-tls-rfc8446bis-13
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
If the "Specification Required" [
RFC8126
] procedure applies,
registration requests can be sent to iana@iana.org or submitted via
IANA's [
application form
], per [
RFC9847
]. IANA
will forward the submission to the expert mailing list described in
RFC 8447, Section 17
] and track its progress. See the registration
procedure table below for more information.
Note
If the "Recommended" column is set to "N", it does not necessarily
mean that it is flawed; rather, it indicates that the item either
has not been through the IETF consensus process, has limited
applicability, or is intended only for specific use cases. If the
"Recommended" column is set to "D," the item is discouraged and
SHOULD NOT or MUST NOT be used, depending upon the situation;
consult the item's references for clarity.
Note
The role of the designated expert is described in [
RFC8447
].
The designated expert [
RFC8126
] ensures that the specification is
publicly available. It is sufficient to have an Internet-Draft
(that is posted and never published as an RFC) or a document from
another standards body, industry consortium, university site, etc.
The expert may provide more in depth reviews, but their approval
should not be taken as an endorsement of the key exchange mode.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
"Recommended" set to/transitioning from "Y" or "D"
Either Standards Action With Expert Review or IESG Approval
"Recommended" set to "N," not transitioning from another value
Specification Required
Value
Description
Recommended
Reference
Comment
psk_ke
RFC-ietf-tls-rfc8446bis-13
psk_dhe_ke
RFC-ietf-tls-rfc8446bis-13
2-253
Unassigned
254-255
Reserved for Private Use
RFC-ietf-tls-rfc8446bis-13
TLS KDF Identifiers
Expert(s)
Rich Salz, Nick Sullivan
Reference
RFC9258
][
RFC-ietf-tls-tls12-frozen-08
][
RFC9847
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Note
Any TLS entry added after the IESG approves publication of [
RFC-ietf-tls-tls12-frozen-08
is intended for TLS 1.3 or later, and makes no similar requirement
on DTLS. Such entries should have an informal indication like "For
TLS 1.3 or later" in that entry, such as the "Comment" column.
Available Formats
CSV
Range
Registration Procedures
0x0000-0xfeff
Specification Required
0xff00-0xffff
Private Use
Value
KDF Description
Reference
Comment
0x0000
Reserved
RFC9258
0x0001
HKDF_SHA256
RFC5869
0x0002
HKDF_SHA384
RFC5869
0x0003-0xfeff
Unassigned
0xff00-0xffff
Reserved for Private Use
RFC9258
TLS SSLKEYLOGFILE Labels
Registration Procedure(s)
Specification Required
Expert(s)
Unassigned
Reference
RFC-ietf-tls-keylogfile-05
][
RFC9847
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Available Formats
CSV
Value
Description
Reference
Comment
CLIENT_RANDOM
Master secret in TLS 1.2 and earlier
RFC-ietf-tls-keylogfile-05
CLIENT_EARLY_TRAFFIC_SECRET
Secret for client early data records
RFC-ietf-tls-keylogfile-05
EARLY_EXPORTER_SECRET
Early exporter secret
RFC-ietf-tls-keylogfile-05
CLIENT_HANDSHAKE_TRAFFIC_SECRET
Secret protecting client handshake
RFC-ietf-tls-keylogfile-05
SERVER_HANDSHAKE_TRAFFIC_SECRET
Secret protecting server handshake
RFC-ietf-tls-keylogfile-05
CLIENT_TRAFFIC_SECRET_0
Secret protecting client records post handshake
RFC-ietf-tls-keylogfile-05
SERVER_TRAFFIC_SECRET_0
Secret protecting server records post handshake
RFC-ietf-tls-keylogfile-05
EXPORTER_SECRET
Exporter secret after handshake
RFC-ietf-tls-keylogfile-05
ECH_SECRET
HPKE KEM shared secret used in the ECH
RFC-ietf-tls-keylogfile-05
ECH_CONFIG
ECHConfig used for construction of the ECH
RFC-ietf-tls-keylogfile-05
TLS RRC Message Types
Registration Procedure(s)
Expert Review
Expert(s)
Rich Salz, Nick Sullivan, Yoav Nir
Reference
RFC9853
Note
Registration requests should be sent to iana@iana.org or submitted
via IANA's [
application form
], per [
RFC9847
].
IANA will forward the request to the expert mailing list described in
RFC 8447, Section 17
] and track its progress.
Note
As specified in [
RFC8126
], assignments made in the Private Use space are
not generally useful for broad interoperability. Those making use of the
Private Use range are responsible for ensuring that no conflicts occur
within the intended scope of use. For widespread experiments, provisional
registrations (Section 4.13 of [
RFC8126
]) are available.
Available Formats
CSV
Value
Description
DTLS-Only
Recommended
Reference
Comment
path_challenge
RFC9853
path_response
RFC9853
path_drop
RFC9853
3-253
Unassigned
254-255
Reserved for Private Use
RFC9853
Contact Information
ID
Name
Contact URI
[_3GPP_Specifications_Manager]
3GPP Specifications Manager
mailto:3gppContact&etsi.org
2026-03-09
[Broadband_Forum]
Broadband Forum
mailto:help&broadband-forum.org
2022-03-25
[Miguel_Angel_Reina_Ortega]
Miguel Angel Reina Ortega
mailto:MiguelAngel.ReinaOrtega&etsi.org
2018-02-16
[Pasi_Eronen]
Pasi Eronen
mailto:pasi.eronen&nokia.com
2008-04-04
[Silke_Holtmanns]
Silke Holtmanns
mailto:Silke.Holtmanns&nokia.com
2013-01-30
Footnote
[1]
These values were allocated from the Reserved state due to a
misunderstanding of the difference between Reserved and Unallocated
that went undetected for a long time. Additional allocations from
the Reserved state are not expected, and the TLS SignatureScheme
registry is suitable for use for new allocations instead of this
registry.