API Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5749
[ACTIVE]

Distribution of EAP-Based Keys for Handover and Re-Authentication

Metadata

Publisher
IETF
Doc Type
Standard
Pages
12
Abstract
This document describes an abstract mechanism for delivering root keys from an Extensible Authentication Protocol (EAP) server to another network server that requires the keys for offering security protected services, such as re-authentication, to an EAP peer. The distributed root key can be either a usage-specific root key (USRK), a domain-specific root key (DSRK), or a domain-specific usage- specific root key (DSUSRK) that has been derived from an Extended Master Session Key (EMSK) hierarchy previously established between the EAP server and an EAP peer. This document defines a template for a key distribution exchange (KDE) protocol that can distribute these different types of root keys using a AAA (Authentication, Authorization, and Accounting) protocol and discusses its security requirements. The described protocol template does not specify message formats, data encoding, or other implementation details. It thus needs to be instantiated with a specific protocol (e.g., RADIUS or Diameter) before it can be used. [STANDARDS-TRACK]
Publication Date
2010-03-01
Status Note
Proposed Standard
DOI
10.17487/RFC5749
Link
https://doi.org/10.17487/RFC5749
Author(s)
Katrin Hoeper
Madjid Nakhjiri
Yoshihiro Ohba
Keyword(s)
Security, Authentication, Mobility, EAP, Key Management, Key Distribution
Latest version of IETF RFC 5749

Document Versions — IETF RFC 5749

  • ▶ IETF RFC 5749 (2010-03-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5749.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5749, Distribution of EAP-Based Keys for Handover and Re-Authentication. Available at https://doi.org/10.17487/RFC5749
Snippet:
IETF RFC 5749, Distribution of EAP-Based Keys for Handover and Re-Authentication. Available at https://doi.org/10.17487/RFC5749

HTML (ISO 690 compliant)

Preview:
IETF RFC 5749, Distribution of EAP-Based Keys for Handover and Re-Authentication. Available at https://doi.org/10.17487/RFC5749
Snippet:
<span class="citation"><cite>IETF RFC 5749</cite>, Distribution of EAP-Based Keys for Handover and Re-Authentication. Available at <a href="https://doi.org/10.17487/RFC5749" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5749</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5749, Distribution of EAP-Based Keys for Handover and Re-Authentication
doi: 10.17487/RFC5749
url: https://doi.org/10.17487/RFC5749
Snippet:
<li>
<cite id="bib-rfc5749">IETF RFC 5749</cite>, Distribution of EAP-Based Keys for Handover and Re-Authentication
<span class="doi">10.17487/RFC5749</span>
</li>

Referenced By