Key Exchange Method Updates and Recommendations for Secure Shell
RFC 9142, “Key Exchange Method Updates and Recommendations for Secure Shell”, is a Proposed Standard document published in January 2022 by M. Baushke. It updates RFC 4250, RFC 4253, RFC 4432, RFC 4462. The canonical text is published by the RFC Editor.
Abstract
This document updates the recommended set of key exchange methods for use in the Secure Shell (SSH) protocol to meet evolving needs for stronger security. It updates RFCs 4250, 4253, 4432, and 4462.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9142 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9143 Negotiating Media Multiplexing Using the Session Description Protocol
- RFC 9146 Connection Identifier for DTLS 1.2
- RFC 9147 The Datagram Transport Layer Security Protocol Version 1.3
- RFC 9148 EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
- RFC 9149 TLS Ticket Requests
- RFC 9150 TLS 1.3 Authentication and Integrity-Only Cipher Suites
- RFC 9151 Commercial National Security Algorithm Suite Profile for TLS and DTLS 1.2 and 1.3
- RFC 9152 Secure Object Delivery Protocol Server Interfaces: NSA's Profile for Delivery of Certificates, Certificate Revocation Lists , and Symmetric Keys to Clients