The protected handshake
01TLS 1.3 negotiates keys before encrypting the remainder of the handshake.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 2 ↗
RFC 9846 · § 2EXAMPLE
3 / 3
03
Finished
Check the transcript and complete the required Finished exchange.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
RFC 8446 TLS 1.3RFC 9846 § 1.2
This backward-compatible revision retains version 1.3 while tightening key-share reuse, key-update, version-negotiation, and other requirements.
Read the updated RFC section ↗ClientHello and ServerHello negotiate the parameters and key exchange.
- ClientHello and ServerHello negotiate the parameters and key exchange.
- Handshake messages after ServerHello are encrypted.
- Authentication and Finished checks must succeed before relying on the connection.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy