Question: In a 3GPP Network Domain Security (NDS) context, when implementing TLS 1.3 for IP network layer security, which of the following key exchange algorithms MUST be supported in addition to the requirements outlined in RFC 8446?
Option 1: RSA with 2048-bit keys
Option 2: Key exchange with secp256r1
Option 3: DH (Diffie-Hellman) with a minimum of 1024-bit prime modulus
Option 4: Key exchange with secp384r1
Explanation: According to the profiling for TLS 1.3 in the context of Network Domain Security, in addition to the standard requirements given in RFC 8446, key exchange with secp384r1 (a specific elliptic curve used in Elliptic Curve Diffie-Hellman key exchange) MUST be supported. This is specified to ensure a higher level of security for key exchanges within the network domain.