TLS1.3 is released in August 2018 (RFC8446). It is a latest version of Transport Layer Protocol. It will remove a weaker algorithms and improve a speed of authentication.
TLS 1.2 Cipher suit diagram:
TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Key Exchange[DHE], Authentication [RSA], Encryption [AES_256_CBC] and Hashing [SHA]
TLS1.3 including 5 Cipher Suites:
- TLS_AES_128_GCM_SHA256 [Must Implement]
- TLS_AES_256_GCM_SHA384 [Should be Implement]
- TLS_CHACHA2-_POLY305_SHA256 [Should be implement]
- TLS_AES_128_CCM_SHA256 [Can implement]
- TLS_AES_128_CCM_8_SHA256 [Can implement]
It will follow up with forward secrecy [Once Encrypted always encrypted]
TLS1.3 will remove a custom DH Groups and support a standard based group only, because it will lead may insecure groups being used and breach a security.
DH means Diffi-Hellman starts with agreeing upon some values.
Approved DH groups are designated via various standards.
* Traditional DH groups : RFC 2409 & RFC 3526
* Elliptic Curve Groups : RFC 5639, FIPS 186-4






