Extensible Authentication Protocol (EAP) Key Management Framework

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 79
Abstract: The Extensible Authentication Protocol (EAP), defined in RFC 3748, enables extensible network access authentication. This document specifies the EAP key hierarchy and provides a framework for the transport and usage of keying material and parameters generated by EAP authentication algorithms, known as "methods". It also provides a detailed system-level security analysis, describing the conditions under which the key management guidelines described in RFC 4962 can be satisfied. [STANDARDS-TRACK]
Publication Date: 2008-08-01
Status Note: Proposed Standard
DOI: 10.17487/RFC5247
Link: https://doi.org/10.17487/RFC5247
Author(s): Dr. Bernard D. Aboba
Daniel Simon
Pasi Eronen
Keyword(s): EAP, Key Hierarchy

Latest version of IETF RFC 5247

Document Versions — IETF RFC 5247

▶ IETF RFC 5247 (2008-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

RFC8940 NOT IN REGISTRY

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 4962 [Active*]

Bibliographic Reference(s)

IEEE.STD802.1X.2004 — IEEE802.1X EXTERNAL
IEEE.STD802.11.2007 — IEEE-802.11 EXTERNAL
IEEE.STD802.11F.2003 — IEEE 802.11F EXTERNAL
IEEE.STD802.16E.2005 — IEEE-802.16e EXTERNAL
ISBN.158113925X — Analysis EXTERNAL
Arkko, J. and P. Eronen, "Authenticated Service Information for the Extensible Authentication Protocol (EAP)", Work in Progress, October 2005. EXTERNAL
Institute of Electrical and Electronics Engineers, "Supplement to Standard for Telecommunications and Information Exchange Between Systems - LAN/MAN Specific Requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Specification for Enhanced Security", IEEE 802.11i/D1, 2001. EXTERNAL
Mishra, A., Shin, M., Arbaugh, W., Lee, I. and K. Jang, "Proactive Key Distribution to support fast and secure roaming", IEEE 802.11 Working Group, IEEE-03- 084r1-I, http://www.ieee802.org/11/Documents/ DocumentHolder/3-084.zip , January 2003. EXTERNAL
Ohba, Y., Parthasrathy, M., and M. Yanagiya, "Channel Binding Mechanism Based on Parameter Binding in Key Derivation", Work in Progress, June 2007. EXTERNAL
IEEE Standards for Local and Metropolitan Area Networks: Draft Standard for Virtual Bridged Local Area Networks, P802.1Q-2003, January 2003. EXTERNAL
Fantacci, R., Maccari, L., Pecorella, T., and F. Frosali, "A secure and performant token-based authentication for infrastructure and mesh 802.1X networks", IEEE Conference on Computer Communications, June 2006. EXTERNAL
Bargh, M., Hulsebosch, R., Eertink, E., Prasad, A., Wang, H. and P. Schoo, "Fast Authentication Methods for Handovers between IEEE 802.11 Wireless LANs", Proceedings of the 2nd ACM international workshop on Wireless mobile applications and services on WLAN hotspots, October, 2004. EXTERNAL
Ohba, Y., Das, S., and A. Duttak, "Kerberized Handover Keying: A Media-Independent Handover Key Management Architecture", Mobiarch 2007. EXTERNAL
Puthenkulam, J., Lortz, V., Palekar, A., and D. Simon, "The Compound Authentication Binding Problem", Work in Progress, October 2003. EXTERNAL
Friedman, A., Sheffer, Y., and A. Shaqed, "Short-Term Certificates", Work in Progress, June 2007. EXTERNAL
Dondeti, L., Xiang, J., and S. Rowles, "GKDP: Group Key Distribution Protocol", Work in Progress, March 2006. EXTERNAL
Arbaugh, W. and B. Aboba, "Handoff Extension to RADIUS", Work in Progress, October 2003. EXTERNAL
He, C., Sundararajan, M., Datta, A. Derek, A. and J. C. Mitchell, "A Modular Correctness Proof of TLS and IEEE 802.11i", ACM Conference on Computer and Communications Security (CCS '05), November, 2005. EXTERNAL
National Institute of Standards and Technology, "Recommendation for Key Management", Special Publication 800-57, May 2006. EXTERNAL
Klima, V., "Tunnels in Hash Functions: MD5 Collisions Within a Minute", Cryptology ePrint Archive, March 2006, http://eprint.iacr.org/2006/105.pdf EXTERNAL
Pack, S. and Y. Choi, "Pre-Authenticated Fast Handoff in a Public Wireless LAN Based on IEEE 802.1x Model", Proceedings of the IFIP TC6/WG6.8 Working Conference on Personal Wireless Communications, p.175-182, October 23-25, 2002. EXTERNAL
Mishra, A., Shin, M. and W. Arbaugh, "Pro-active Key Distribution using Neighbor Graphs", IEEE Wireless Communications, vol. 11, February 2004. EXTERNAL
IETF RFC 1661 [Active*]
IETF RFC 1968 [Active*]
IETF RFC 2230 [Active*]
IETF RFC 2409 [Superseded*]
IETF RFC 2516 [Active*]
IETF RFC 2548 [Active*]
IETF RFC 2607 [Active*]
IETF RFC 2716 [Superseded*]
IETF RFC 2782 [Active*]
IETF RFC 2845 [Superseded*]
IETF RFC 2865 [Active*]
IETF RFC 3007 [Active*]
IETF RFC 3162 [Active*]
IETF RFC 3547 [Superseded*]
IETF RFC 3579 [Active*]
IETF RFC 3580 [Active*]
IETF RFC 3588 [Superseded*]
IETF RFC 3766 [Active*]
IETF RFC 3830 [Active*]
IETF RFC 4005 [Superseded*]
IETF RFC 4017 [Active*]
IETF RFC 4033 [Active*]
IETF RFC 4035 [Active*]
IETF RFC 4067 [Active*]
IETF RFC 4072 [Active*]
IETF RFC 4118 [Active*]
IETF RFC 4186 [Active*]
IETF RFC 4187 [Active*]
IETF RFC 4282 [Superseded*]
IETF RFC 4284 [Active*]
IETF RFC 4301 [Active, Amended*]
IETF RFC 4306 [Superseded*]
IETF RFC 4334 [Active*]
IETF RFC 4372 [Active*]
IETF RFC 4535 [Active*]
IETF RFC 4675 [Active*]
IETF RFC 4718 [Superseded*]
IETF RFC 4763 [Active*]
IETF RFC 4764 [Active*]
IETF RFC 5176 [Active*]
IETF RFC 5216 [Active*]
IETF RFC 5246 [Superseded*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5247.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 5247, Extensible Authentication Protocol (EAP) Key Management Framework. Available at https://doi.org/10.17487/RFC5247

Snippet:

IETF RFC 5247, Extensible Authentication Protocol (EAP) Key Management Framework. Available at https://doi.org/10.17487/RFC5247

HTML (ISO 690 compliant)

Preview:

IETF RFC 5247, Extensible Authentication Protocol (EAP) Key Management Framework. Available at https://doi.org/10.17487/RFC5247

Snippet:

<span class="citation"><cite>IETF RFC 5247</cite>, Extensible Authentication Protocol (EAP) Key Management Framework. Available at <a href="https://doi.org/10.17487/RFC5247" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5247</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 5247, Extensible Authentication Protocol (EAP) Key Management Framework
doi: 10.17487/RFC5247
url: https://doi.org/10.17487/RFC5247

Snippet:

<li>
<cite id="bib-rfc5247">IETF RFC 5247</cite>, Extensible Authentication Protocol (EAP) Key Management Framework
<span class="doi">10.17487/RFC5247</span>
</li>

Referenced By

IETF draft-ietf-emu-tls-eap-types-04 [Active*]
IETF RFC 5281 [Active*]
IETF RFC 5295 [Active*]
IETF RFC 5448 [Active*]
IETF RFC 5931 [Active*]
IETF RFC 6614 [Active*]
IETF RFC 6678 [Active*]
IETF RFC 7170 [Superseded*]
IETF RFC 7241 [Active*]
IETF RFC 7925 [Active*]
IETF RFC 9048 [Active*]
IETF RFC 9190 [Active*]