|
|
|
|
|
|
|
|
|
|
| Last Update: August 10, 2010
|
|
|
|
|
|
|
|
|
|
|
| | |
RFC5216
03/2008
(34 p.)
pdf(2p)
|
D. Simon
B. Aboba
R. Hurst |
|
The EAP-TLS Authentication Protocol |
The Extensible Authentication Protocol (EAP), defined in
RFC 3748,
provides support for multiple authentication methods. Transport
Layer Security (TLS) provides for mutual authentication, integrity-
protected ciphersuite negotiation, and key exchange between two
endpoints. This document defines EAP-TLS, which includes support for
certificate-based mutual authentication and key derivation.
This document obsoletes RFC 2716. A summary of the changes between
this document and RFC 2716 is available in Appendix A.
|
|
|
| |
| List |
Status: | Proposed Standard |
|
|
|
|
|
|
|
|
|
| | |
RFC5421
03/2009
(10 p.)
pdf(2p)
|
N. Cam-Winget
H. Zhou |
|
Basic Password Exchange within EAP-FAST |
|
The Flexible Authentication via Secure Tunneling Extensible
Authentication Protocol (EAP-FAST) method enables secure
communication between a peer and a server by using Transport Layer
Security (TLS) to establish a mutually authenticated tunnel. Within
this tunnel, a basic password exchange, based on the Generic Token
Card method (EAP-GTC), may be executed to authenticate the peer.
|
|
|
| |
| List |
Status: | Informational |
|
|
|
|
|
|
|
|
|
| | |
RFC5433
02/2009
(38 p.)
pdf(2p)
|
T. Clancy
H. Tschofenig |
|
EAP - Generalized Pre-Shared Key (EAP-GPSK) Method |
|
This memo defines an Extensible Authentication Protocol (EAP) method
called EAP Generalized Pre-Shared Key (EAP-GPSK). This method is a
lightweight shared-key authentication protocol supporting mutual
authentication and key derivation.
|
|
|
| |
| List |
Status: | Proposed Standard |
|
|
|
|
|
|
|
|
|
| | |
RFC5931
08/2010
(40 p.)
pdf(2p)
|
D. Harkins
G. Zorn |
|
EAP - Authentication Using Only a Password |
|
This memo describes an Extensible Authentication Protocol (EAP)
method, EAP-pwd, which uses a shared password for authentication.
The password may be a low-entropy one and may be drawn from some set
of possible passwords, like a dictionary, which is available to an
attacker. The underlying key exchange is resistant to active attack,
passive attack, and dictionary attack.
|
|
|
| |
| List |
Status: | Informational |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
