Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0)
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 51
- Abstract
- EAP-TTLS is an EAP (Extensible Authentication Protocol) method that encapsulates a TLS (Transport Layer Security) session, consisting of a handshake phase and a data phase. During the handshake phase, the server is authenticated to the client (or client and server are mutually authenticated) using standard TLS procedures, and keying material is generated in order to create a cryptographically secure tunnel for information exchange in the subsequent data phase. During the data phase, the client is authenticated to the server (or client and server are mutually authenticated) using an arbitrary authentication mechanism encapsulated within the secure tunnel. The encapsulated authentication mechanism may itself be EAP, or it may be another authentication protocol such as PAP, CHAP, MS-CHAP, or MS-CHAP-V2. Thus, EAP-TTLS allows legacy password-based authentication protocols to be used against existing authentication databases, while protecting the security of these legacy protocols against eavesdropping, man-in-the-middle, and other attacks. The data phase may also be used for additional, arbitrary data exchange. This memo provides information for the Internet community.
- Publication Date
- 2008-08-01
- Status Note
- Informational
- DOI
10.17487/RFC5281- Link
- https://doi.org/10.17487/RFC5281
- Author(s)
- Paul FunkSimon Blake-Wilson
- Keyword(s)
- EAP, AAA, Authentication, TLS
Latest version of IETF RFC 5281
Document Versions — IETF RFC 5281
-
▶ IETF RFC 5281 (2008-08-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1661 [Active*]
- IETF RFC 2119 [Active*]
- IETF RFC 2246 [Superseded*]
- IETF RFC 2433 [Active*]
- IETF RFC 2548 [Active*]
- IETF RFC 2759 [Active*]
- IETF RFC 2865 [Active*]
- IETF RFC 3232 [Active*]
- IETF RFC 3588 [Superseded*]
- IETF RFC 3748 [Active*]
- IETF RFC 4282 [Superseded*]
- IETF RFC 4346 [Superseded*]
- IETF RFC 5216 [Active*]
- IETF RFC 5226 [Superseded*]
- IETF RFC 5247 [Active*]
Bibliographic Reference(s)
- IEEE.STD802.1X.2004 — IEEE802.1X EXTERNAL
- IEEE.STD802.11.2007 — IEEE-802.11 EXTERNAL
- Asokan, N., Niemi, V., and Nyberg, K., "Man-in-the- Middle in Tunneled Authentication", http://www.saunalahti.fi/~asokan/research/mitm.html , Nokia Research Center, Finland, October 24, 2002. EXTERNAL
- Hanna, S. and P. Funk, "Key Agility Extensions for EAP- TTLSv0", Work in Progress, September 2007. EXTERNAL
- National Institute of Standards and Technology, "Recommendation for Key Management", Special Publication 800-57, May 2006. EXTERNAL
- IETF RFC 2560 [Superseded*]
- IETF RFC 3766 [Active*]
- IETF RFC 4366 [Superseded*]
- IETF RFC 5280 [Active, Amended*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5281.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5281, Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0). Available at https://doi.org/10.17487/RFC5281
Snippet:
IETF RFC 5281, Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0). Available at https://doi.org/10.17487/RFC5281
HTML (ISO 690 compliant)
Preview:
IETF RFC 5281, Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0). Available at https://doi.org/10.17487/RFC5281
Snippet:
<span class="citation"><cite>IETF RFC 5281</cite>, Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0). Available at <a href="https://doi.org/10.17487/RFC5281" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5281</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5281, Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0)
doi: 10.17487/RFC5281
url: https://doi.org/10.17487/RFC5281
doi: 10.17487/RFC5281
url: https://doi.org/10.17487/RFC5281
Snippet:
<li> <cite id="bib-rfc5281">IETF RFC 5281</cite>, Extensible Authentication Protocol Tunneled Transport Layer Security Authenticated Protocol Version 0 (EAP-TTLSv0) <span class="doi">10.17487/RFC5281</span> </li>
Referenced By
- IETF draft-ietf-emu-tls-eap-types-04 [Active*]
- IETF RFC 5580 [Active*]
- IETF RFC 5705 [Active*]
- IETF RFC 6678 [Active*]
- IETF RFC 7029 [Active*]
- IETF RFC 7170 [Superseded*]
- IETF RFC 7542 [Active*]
- IETF RFC 8996 [Active*]
- IETF RFC 9048 [Active*]
- IETF RFC 9190 [Active*]
- IETF RFC 9191 [Active*]
- IETF RFC 9427 [Active*]