⌕ Поиск по атласу

IETF · RFC · RFC8937

RFC8937 · Randomness Improvements for Security Protocols

Randomness Improvements for Security Protocols

Randomness is a crucial ingredient for Transport Layer Security (TLS) and related security protocols. Weak or predictable "cryptographically secure" pseudorandom number generators (CSPRNGs) can be abused or exploited for malicious purposes. An initial entropy source that seeds a CSPRNG might be weak or broken as well, which can also lead to critical and systemic security problems. This document describes a way for security protocol implementations to augment their CSPRNGs using long-term private keys. This improves randomness from broken or otherwise subverted CSPRNGs. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Официальная английская аннотация

Randomness is a crucial ingredient for Transport Layer Security (TLS) and related security protocols. Weak or predictable "cryptographically secure" pseudorandom number generators (CSPRNGs) can be abused or exploited for malicious purposes. An initial entropy source that seeds a CSPRNG might be weak or broken as well, which can also lead to critical and systemic security problems. This document describes a way for security protocol implementations to augment their CSPRNGs using long-term private keys. This improves randomness from broken or otherwise subverted CSPRNGs. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Связи документа

Официальный источник · 2020-10-01

Полные импортированные сведения карточки
{
  "id": "RFC8937",
  "number": 8937,
  "title_en": "Randomness Improvements for Security Protocols",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "Randomness is a crucial ingredient for Transport Layer Security (TLS) and related security protocols. Weak or predictable \"cryptographically secure\" pseudorandom number generators (CSPRNGs) can be abused or exploited for malicious purposes. An initial entropy source that seeds a CSPRNG might be weak or broken as well, which can also lead to critical and systemic security problems. This document describes a way for security protocol implementations to augment their CSPRNGs using long-term private keys. This improves randomness from broken or otherwise subverted CSPRNGs. This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.",
  "authors": [
    "C. Cremers",
    "L. Garratt",
    "S. Smyshlyaev",
    "N. Sullivan",
    "C. Wood"
  ],
  "organizations": [],
  "publication_date": "2020-10-01",
  "current_status": "INFORMATIONAL",
  "current_status_ru": "Информационный",
  "publication_status": "INFORMATIONAL",
  "publication_status_ru": "Информационный",
  "lifecycle": "informational",
  "lifecycle_ru": "Справочный",
  "stream": "IRTF",
  "stream_ru": "Исследовательская группа Интернета (IRTF)",
  "area": "",
  "area_ru": "",
  "working_group": "",
  "source_draft": "draft-irtf-cfrg-randomness-improvements-14",
  "page_count": 9,
  "doi": "10.17487/RFC8937",
  "keywords": [
    "Security",
    "Cryptography",
    "TLS"
  ],
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [],
    "updates": [],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc8937/",
    "html": "https://www.rfc-editor.org/rfc/rfc8937.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc8937.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc8937/"
  }
}