SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/tech-tls-traffic-keys

What does a TLS 1.3 key exchange establish for protecting data?

It establishes shared secrets that derive traffic keys.

Start playing free

  1. Shared secrets and traffic keys ✔
  2. A reusable account password
  3. A public DNS record

Why: The handshake negotiates algorithms, authenticates peers as configured, and establishes shared secrets. Derived traffic keys then protect later handshake records and application data.

Huh, didn't know that: TLS 1.3 cipher suites specify an authenticated encryption algorithm and a hash.

The dad joke
TLS directed traffic with keys instead of orange cones.
Like this card?
Play the game

References

Answer: Shared secrets and traffic keys. The handshake negotiates algorithms, authenticates peers as configured, and establishes shared secrets. Derived traffic keys then protect later handshake records and application data.

  1. RFC 8446, TLS 1.3 www.rfc-editor.org/rfc/rfc8446.html
    establish shared secrets, including the traffic keys used to protect the rest of the handshake and the data
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhat does file-encrypting ransomware do before demanding payment?Security & PrivacyWhat key does symmetric encryption use to encrypt and decrypt?Security & PrivacyWhat keys make asymmetric cryptography asymmetric?

That's stuff everyone should know.