Subject: [Emu] 3GPP mandates Rel-16 EAP-TLS implementations to support TLS 1.3

From: John Mattsson <[email-masked]>
Date: Mon, 9 Mar 2020 09:20:18 +0000

Hi,

I am happy to report that 3GPP just took the decision that nodes supporting EAP-TLS shall support EAP-TLS with TLS 1.3. The changes apply to all 3GPP Rel-16 nodes. [1]

The 3GPP profiling for TLS in EAP-TLS now follows the general 3GPP TLS profiling, which mandates support of TLS 1.3, forbids support of TLS 1.1, MD5, SHA-1, non-AEAD, non-PFS, and  mandates minimum key lengths of 2048 for RSA/FFDH and 255 for ECC.

Cheers,
John

[1] http://www.3gpp.org/ftp/TSG_SA/WG3_Security/TSGS3_98e/Docs/S3-200318.zip