RFC 7696: BCP 201: Guidelines for Cryptographic Algorithm Agility and Selecting Mandatory-to-Implement Algorithms
Best Current Practice
- R. Housley
- November 2015
- IETF publication
Abstract
Many IETF protocols use cryptographic algorithms to provide confidentiality, integrity, authentication, or digital signature. Communicating peers must support a common set of cryptographic algorithms for these mechanisms to work properly. This memo provides guidelines to ensure that protocols have the ability to migrate from one mandatory-to-implement algorithm suite to another over time.