RFC 10015：TLS 1.2和DTLS 1.2弃用过时密钥交换方法

互联网工程任务组(IETF)发布了RFC 10015标准文件，规定弃用TLS 1.2和DTLS 1.2中的多种过时密钥交换方法1。被弃用的方法包括有限域上的Diffie-Hellman(FFDH)、RSA和静态椭圆曲线Diffie-Hellman(ECDH)密码套件1。该决定针对这些算法存在的已知安全漏洞，包括Raccoon攻击、Bleichenbacher攻击、Invalid Curve攻击以及缺乏前向保密性1。此外，1024位FFDHE组仅提供相对于795位离散对数记录的微小安全边际1。

根据新标准，客户端禁止提供非临时FFDH密码套件，服务器也禁止选择这些套件1。RFC 10015同时更新了18项相关RFC文件1。互联网号码分配局(IANA)将在"TLS密码套件"注册表中把受影响的密码套件标记为"D"（已弃用）1。

The Internet Engineering Task Force (IETF) has published RFC 10015, a new standard that deprecates outdated key exchange methods in TLS 1.2 and DTLS 1.2 protocols 1. The deprecated methods include finite field Diffie-Hellman (FFDH), RSA, and static elliptic curve Diffie-Hellman (ECDH) cipher suites 1.

The deprecation addresses multiple known security vulnerabilities affecting these algorithms 1. The deprecated methods are vulnerable to Raccoon attacks, Bleichenbacher attacks, Invalid Curve attacks, and lack forward secrecy 1. Additionally, 1024-bit FFDHE groups provide only minimal security margin relative to 795-bit discrete logarithm records 1. Under the new policy, clients must not offer non-ephemeral FFDH cipher suites, and servers must not select them 1.

RFC 10015 updates 18 existing RFCs and establishes that affected cipher suites will be marked with a "D" (deprecated) designation in the IANA "TLS Cipher Suite" registry 1.