Extensible Authentication Protocol (EAP)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 67
- Abstract
- This document defines the Extensible Authentication Protocol (EAP), an authentication framework which supports multiple authentication methods. EAP typically runs directly over data link layers such as Point-to-Point Protocol (PPP) or IEEE 802, without requiring IP. EAP provides its own support for duplicate elimination and retransmission, but is reliant on lower layer ordering guarantees. Fragmentation is not supported within EAP itself; however, individual EAP methods may support this. This document obsoletes RFC 2284. A summary of the changes between this document and RFC 2284 is available in Appendix A. [STANDARDS-TRACK]
- Publication Date
- 2004-06-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC3748- Link
- https://doi.org/10.17487/RFC3748
- Author(s)
- Dr. Bernard D. AbobaLarry BlunkJohn VollbrechtJames D. CarlsonHenrik Levkowetz
- Keyword(s)
- PPP-EAP, EAP, Data Link Layer, IEEE 802
Latest version of IETF RFC 3748
Document Versions — IETF RFC 3748
-
▶ IETF RFC 3748 (2004-06-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IEEE.STD802.1X.2001 — IEEE8021X EXTERNAL
- IEEE Std 802:1990 [Superseded]
- IETF RFC 1661 [Active*]
- IETF RFC 1994 [Active*]
- IETF RFC 2119 [Active*]
- IETF RFC 2243 [Active*]
- IETF RFC 2279 [Superseded*]
- IETF RFC 2289 [Active*]
- IETF RFC 2434 [Superseded*]
- IETF RFC 2988 [Superseded*]
Bibliographic Reference(s)
- IEEE.STD802.11.1999 — IEEE80211 EXTERNAL
- Institute of Electrical and Electronics Engineers, "Unapproved Draft Supplement to Standard for Telecommunications and Information Exchange Between Systems - LAN/MAN Specific Requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Specification for Enhanced Security", IEEE Draft 802.11i (work in progress), 2003. EXTERNAL
- Wu, T., "A Real-World Analysis of Kerberos Password Security", Proceedings of the 1999 ISOC Network and Distributed System Security Symposium, http://www.isoc.org/isoc/conferences/ndss/99/ proceedings/papers/wu.pdf . EXTERNAL
- Aboba, B., "EAP Key Management Framework" , Work in Progress, October 2003. EXTERNAL
- Stanley, D., "EAP Method Requirements for Wireless LANs", Work in Progress, February 2004. EXTERNAL
- Asokan, N., Niemi, V. and K. Nyberg, "Man-in-the- Middle in Tunneled Authentication Protocols", IACR ePrint Archive Report 2002/163, October 2002, < http://eprint.iacr.org/2002/163 >. EXTERNAL
- Aboba, B., Krawczyk, H. and Y. Sheffer, "PIC, A Pre-IKE Credential Provisioning Protocol", Work in Progress, October 2002. EXTERNAL
- Eronen, P., Hiller, T. and G. Zorn, "Diameter Extensible Authentication Protocol (EAP) Application", Work in Progress, February 2004. EXTERNAL
- Slatalla, M. and J. Quittner, "Masters of Deception", Harper-Collins, New York, 1995. EXTERNAL
- Dole, B., Lodin, S. and E. Spafford, "Misplaced trust: Kerberos 4 session keys", Proceedings of the Internet Society Network and Distributed System Security Symposium, pp. 60-70, March 1997. EXTERNAL
- Zorn, G., "Specifying Security Claims for EAP Authentication Types", Work in Progress, October 2002. EXTERNAL
- Schneier, B. and Mudge, "Cryptanalysis of Microsoft's PPTP Authentication Extensions (MS- CHAPv2)", CQRE 99, Springer-Verlag, 1999, pp. 192-203. EXTERNAL
- Kaufman, C., "Internet Key Exchange (IKEv2) Protocol", Work in Progress, January 2004. EXTERNAL
- Puthenkulam, J., "The Compound Authentication Binding Problem", Work in Progress, October 2003. EXTERNAL
- Bellovin, S. and M. Merrit, "Limitations of the Kerberos authentication system", Proceedings of the 1991 Winter USENIX Conference, pp. 253-267, 1991. EXTERNAL
- Zeilenga, K., "SASLprep: Stringprep profile for user names and passwords", Work in Progress, March 2004. EXTERNAL
- Schneier, B. and Mudge, "Cryptanalysis of Microsoft's Point-to- Point Tunneling Protocol", Proceedings of the 5th ACM Conference on Communications and Computer Security, ACM Press, November 1998. EXTERNAL
- Silverman, Robert D., "A Cost-Based Security Analysis of Symmetric and Asymmetric Key Lengths", RSA Laboratories Bulletin 13, April 2000 (Revised November 2001), http://www.rsasecurity.com/rsalabs/bulletins/ bulletin13.html . EXTERNAL
- IETF RFC 793 [Superseded*]
- IETF RFC 1510 [Superseded*]
- IETF RFC 1750 [Superseded*]
- IETF RFC 2246 [Superseded*]
- IETF RFC 2284 [Superseded*]
- IETF RFC 2408 [Superseded*]
- IETF RFC 2409 [Superseded*]
- IETF RFC 2433 [Active*]
- IETF RFC 2486 [Superseded*]
- IETF RFC 2607 [Active*]
- IETF RFC 2661 [Active*]
- IETF RFC 2716 [Superseded*]
- IETF RFC 2865 [Active*]
- IETF RFC 2960 [Superseded*]
- IETF RFC 3162 [Active*]
- IETF RFC 3454 [Superseded*]
- IETF RFC 3579 [Active*]
- IETF RFC 3580 [Active*]
- IETF RFC 3692 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC3748.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 3748, Extensible Authentication Protocol (EAP). Available at https://doi.org/10.17487/RFC3748
Snippet:
IETF RFC 3748, Extensible Authentication Protocol (EAP). Available at https://doi.org/10.17487/RFC3748
HTML (ISO 690 compliant)
Preview:
IETF RFC 3748, Extensible Authentication Protocol (EAP). Available at https://doi.org/10.17487/RFC3748
Snippet:
<span class="citation"><cite>IETF RFC 3748</cite>, Extensible Authentication Protocol (EAP). Available at <a href="https://doi.org/10.17487/RFC3748" target="_blank" rel="noopener">https://doi.org/10.17487/RFC3748</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 3748, Extensible Authentication Protocol (EAP)
doi: 10.17487/RFC3748
url: https://doi.org/10.17487/RFC3748
doi: 10.17487/RFC3748
url: https://doi.org/10.17487/RFC3748
Snippet:
<li> <cite id="bib-rfc3748">IETF RFC 3748</cite>, Extensible Authentication Protocol (EAP) <span class="doi">10.17487/RFC3748</span> </li>
Referenced By
- IETF draft-ietf-emu-aka-pfs-05 [Active*]
- IETF draft-ietf-emu-tls-eap-types-04 [Active*]
- IETF RFC 4017 [Active*]
- IETF RFC 4058 [Active*]
- IETF RFC 4072 [Active*]
- IETF RFC 4137 [Active*]
- IETF RFC 4186 [Active*]
- IETF RFC 4187 [Active*]
- IETF RFC 4282 [Superseded*]
- IETF RFC 4284 [Active*]
- IETF RFC 4306 [Superseded*]
- IETF RFC 4334 [Active*]
- IETF RFC 4441 [Superseded*]
- IETF RFC 4718 [Superseded*]
- IETF RFC 4763 [Active*]
- IETF RFC 4764 [Active*]
- IETF RFC 4851 [Active*]
- IETF RFC 4949 [Active*]
- IETF RFC 4962 [Active*]
- IETF RFC 5106 [Active*]
- IETF RFC 5113 [Active*]
- IETF RFC 5191 [Active*]
- IETF RFC 5192 [Active*]
- IETF RFC 5193 [Active*]
- IETF RFC 5216 [Active*]
- IETF RFC 5226 [Superseded*]
- IETF RFC 5247 [Active*]
- IETF RFC 5281 [Active*]
- IETF RFC 5295 [Active*]
- IETF RFC 5421 [Active*]
- IETF RFC 5422 [Active*]
- IETF RFC 5448 [Active*]
- IETF RFC 5729 [Active*]
- IETF RFC 5931 [Active*]
- IETF RFC 5996 [Superseded*]
- IETF RFC 6124 [Active*]
- IETF RFC 6677 [Active*]
- IETF RFC 6678 [Active*]
- IETF RFC 6709 [Active*]
- IETF RFC 6733 [Active*]
- IETF RFC 6885 [Active*]
- IETF RFC 6973 [Active*]
- IETF RFC 7029 [Active*]
- IETF RFC 7170 [Superseded*]
- IETF RFC 7241 [Active*]
- IETF RFC 7296 [Active*]
- IETF RFC 7406 [Active*]
- IETF RFC 7542 [Active*]
- IETF RFC 7593 [Active*]
- IETF RFC 7696 [Active*]
- IETF RFC 7925 [Active*]
- IETF RFC 8126 [Active*]
- IETF RFC 9048 [Active*]
- IETF RFC 9190 [Active*]
- IETF RFC 9191 [Active*]
- IETF RFC 9427 [Active*]
- IETF RFC 9678 [Active*]