Guidance for Authentication, Authorization, and Accounting (AAA) Key Management

Metadata

Publisher: IETF
Doc Type: Best Practice
Pages: 23
Abstract: This document provides guidance to designers of Authentication, Authorization, and Accounting (AAA) key management protocols. The guidance is also useful to designers of systems and solutions that include AAA key management protocols. Given the complexity and difficulty in designing secure, long-lasting key management algorithms and protocols by experts in the field, it is almost certainly inappropriate for IETF working groups without deep expertise in the area to be designing their own key management algorithms and protocols based on Authentication, Authorization, and Accounting (AAA) protocols. The guidelines in this document apply to documents requesting publication as IETF RFCs. Further, these guidelines will be useful to other standards development organizations (SDOs) that specify AAA key management. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements.
Publication Date: 2007-07-01
Status Note: Best Current Practice
DOI: 10.17487/RFC4962
Link: https://doi.org/10.17487/RFC4962
Author(s): Russ Housley
Dr. Bernard D. Aboba

Latest version of IETF RFC 4962

Document Versions — IETF RFC 4962

▶ IETF RFC 4962 (2007-07-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]

Bibliographic Reference(s)

IEEE.STD802.1X.2004 — IEEE802.1X EXTERNAL
IEEE.STD802.11I.2004 — IEEE802.11i EXTERNAL
NIST.FIPS.46 — 5 EXTERNAL
Institute of Electrical and Electronics Engineers, "Supplement to Standard for Telecommunications and Information Exchange Between Systems -- LAN/MAN Specific Requirements - Part 16: Air Interface for Fixed and Mobile Broadband Wireless Access Systems -- Amendment for Physical and Medium Access Control Layers for Combined Fixed and Mobile Operation in Licensed Bands", Draft, IEEE 802.16e/D8, May 2005. EXTERNAL
G. Lowe. "An attack on the Needham-Schroeder public key authentication protocol", Information Processing Letters, 56(3):131--136, November 1995. EXTERNAL
Schneier, B. and Mudge, "Cryptanalysis of Microsoft's Point-to-Point Tunneling Protocol", Proceedings of the 5th ACM Conference on Communications and Computer Security, ACM Press, November 1998. EXTERNAL
Meadows, C., "Analysis of the Internet Key Exchange Protocol using the NRL Protocol Analyser", Proceedings of the 1999 IEEE Symposium on Security & Privacy, Oakland, CA, USA, IEEE Computer Society, May 1999, < http://chacs.nrl.navy.mil/publications/CHACS/1999/ 1999meadows-IEEE99.pdf >. EXTERNAL
Brewin, B., "LEAP attack tool author says he wants to alert users to risks", Computerworld, October 17, 2003. EXTERNAL
Dole, B., Lodin, S. and E. Spafford, "Misplaced trust: Kerberos 4 session keys", Proceedings of the Internet Society Network and Distributed System Security Symposium, pp. 60-70, March 1997. EXTERNAL
R. Needham and M. Schroeder. "Using encryption for authentication in large networks of computers", Communications of the ACM, 21(12), December 1978. EXTERNAL
Bellovin, S. and M. Merrit, "Limitations of the Kerberos authentication system", Proceedings of the 1991 Winter USENIX Conference, pp. 253-267, 1991. EXTERNAL
M. Abadi and R. Needham, "Prudent Engineering Practice for Cryptographic Protocols", Proc. IEEE Computer Society Symposium on Research in Security and Privacy, May 1994. EXTERNAL
National Institute of Standards and Technology, "Recommendation for Key Management", Special Publication 800-57, May 2006. EXTERNAL
Housley, R., "Key Management in AAA", Presentation to the AAA WG at IETF 56, March 2003, < http://www.ietf.org/ proceedings/03mar/slides/aaa-5/index.html >. EXTERNAL
Schneier, B. and Mudge, "Cryptanalysis of Microsoft's PPTP Authentication Extensions (MS-CHAPv2)", CQRE 99, Springer-Verlag, 1999, pp. 192-203. EXTERNAL
Wu, T., "A Real-World Analysis of Kerberos Password Security", Proceedings of the 1999 ISOC Network and Distributed System Security Symposium, < http://www.isoc.org/isoc/conferences/ndss/99/ proceedings/papers/wu.pdf >. EXTERNAL
D. Denning and G. Sacco. "Timestamps in key distributed protocols", Communication of the ACM, 24(8):533--535, 1981. EXTERNAL
DCA DDN Program Management Office, "MILNET TAC Access Control", Defense Data Network Newsletter, DDN News 39, Special Issue, 26 Apr 1985, < http://www.isi.edu/ in-notes/museum/ddn-news/ddn-news.n39.2 >. EXTERNAL
IETF RFC 927 [Active*]
IETF RFC 1334 [Superseded*]
IETF RFC 1492 [Active*]
IETF RFC 1661 [Active*]
IETF RFC 1968 [Active*]
IETF RFC 1994 [Active*]
IETF RFC 2284 [Superseded*]
IETF RFC 2409 [Superseded*]
IETF RFC 2419 [Active*]
IETF RFC 2420 [Active*]
IETF RFC 2433 [Active*]
IETF RFC 2548 [Active*]
IETF RFC 2637 [Active*]
IETF RFC 2716 [Superseded*]
IETF RFC 2759 [Active*]
IETF RFC 2865 [Active*]
IETF RFC 2881 [Active*]
IETF RFC 3078 [Active*]
IETF RFC 3079 [Active*]
IETF RFC 3579 [Active*]
IETF RFC 3588 [Superseded*]
IETF RFC 3748 [Active*]
IETF RFC 3766 [Active*]
IETF RFC 4017 [Active*]
IETF RFC 4072 [Active*]
IETF RFC 4306 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC4962.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 4962, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management. Available at https://doi.org/10.17487/RFC4962

Snippet:

IETF RFC 4962, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management. Available at https://doi.org/10.17487/RFC4962

HTML (ISO 690 compliant)

Preview:

IETF RFC 4962, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management. Available at https://doi.org/10.17487/RFC4962

Snippet:

<span class="citation"><cite>IETF RFC 4962</cite>, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management. Available at <a href="https://doi.org/10.17487/RFC4962" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4962</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 4962, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management
doi: 10.17487/RFC4962
url: https://doi.org/10.17487/RFC4962

Snippet:

<li>
<cite id="bib-rfc4962">IETF RFC 4962</cite>, Guidance for Authentication, Authorization, and Accounting (AAA) Key Management
<span class="doi">10.17487/RFC4962</span>
</li>

Referenced By

IETF RFC 5247 [Active*]
IETF RFC 5415 [Active*]
IETF RFC 5931 [Active*]
IETF RFC 6120 [Active*]
IETF RFC 6678 [Active*]
IETF RFC 6709 [Active*]
IETF RFC 7170 [Superseded*]
IETF RFC 7241 [Active*]