TLS 1.3
An IETF-standardized version of the Transport Layer Security protocol that simplifies the handshake process and supports 0-RTT early data; it is the cryptographic foundation of the QUIC protocol.
Timeline (last 90 days)
ECH是TLS 1.3扩展，用于加密ClientHello中的SNI等字段，配置可通过DNS HTTPS记录或Alt-Svc参数中的 ech 字段以base64分发。
TLS 1.3 already supports hybrid key exchange at the protocol level, and KEM has become the standard abstract interface for key exchange.
Ed25519 is an elliptic-curve-based digital signature algorithm known for high performance and resistance to side-channel attacks, and is widely adopted by OpenSSH, TLS 1.3, and others.
Widely used ECC standard curves include NIST P-256, P-384, and Curve25519, the last of which has been broadly adopted by TLS 1.3, the Signal protocol, and many others due to its transparent design, ease of implementation, and strong resistance to side-channel attacks.
JEP 527 builds post-quantum key exchange directly into TLS 1.3 and the JDK, adding hybrid key exchange for TLS 1.3 by running both X25519 and ML-KEM simultaneously and combining the shared secrets.
The TLS 1.3 protocol compresses the handshake process from two round trips (2-RTT) to one round trip (1-RTT) and supports 0-RTT session resumption.
All Facts (6)
ECH是TLS 1.3扩展，用于加密ClientHello中的SNI等字段，配置可通过DNS HTTPS记录或Alt-Svc参数中的 ech 字段以base64分发。
50%UnverifiedTLS 1.3 already supports hybrid key exchange at the protocol level, and KEM has become the standard abstract interface for key exchange.
50%UnverifiedEd25519 is an elliptic-curve-based digital signature algorithm known for high performance and resistance to side-channel attacks, and is widely adopted by OpenSSH, TLS 1.3, and others.
50%UnverifiedWidely used ECC standard curves include NIST P-256, P-384, and Curve25519, the last of which has been broadly adopted by TLS 1.3, the Signal protocol, and many others due to its transparent design, ease of implementation, and strong resistance to side-channel attacks.
50%UnverifiedJEP 527 builds post-quantum key exchange directly into TLS 1.3 and the JDK, adding hybrid key exchange for TLS 1.3 by running both X25519 and ML-KEM simultaneously and combining the shared secrets.
50%UnverifiedThe TLS 1.3 protocol compresses the handshake process from two round trips (2-RTT) to one round trip (1-RTT) and supports 0-RTT session resumption.
50%