Telecom Paris The Transport Layer Security (TLS) 1.3 protocol supports external Pre-Shared Keys (PSKs), which are provisioned out of band. A PSK binder, included in the ClientHello message, is computed as an HMAC over a transcript hash using a key called the Finished External Key (FEK). For the "PSK with (EC)DHE" key exchange mode, where Diffie- Hellman is performed over either finite fields or elliptic curves, the Handshake Secret (HS) is computed from the (EC)DHE shared secret using HKDF-Extract with a key called the Derived Secret Key (DSK), which is derived from the PSK. A TLS identity module SHOULD be used to protect procedures involving keys bound to the PSK, such as the FEK or the DSK. TLS defines keying material exporters, which rely on secrets produced during the handshake protocol. This draft introduces an Exporter Trusted Key (ETK), which is securely stored and used within a TLS identity module. The ETK transforms exporter secrets into trusted values that cannot be recovered by TLS software. A trusted exporter is similar to the legacy TLS exporter, but it uses an additional trusted secret.