API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5931
[ACTIVE]

Extensible Authentication Protocol (EAP) Authentication Using Only a Password

Metadata

Publisher
IETF
Doc Type
Informational
Pages
40
Abstract
This memo describes an Extensible Authentication Protocol (EAP) method, EAP-pwd, which uses a shared password for authentication. The password may be a low-entropy one and may be drawn from some set of possible passwords, like a dictionary, which is available to an attacker. The underlying key exchange is resistant to active attack, passive attack, and dictionary attack. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date
2010-08-01
Status Note
Informational
DOI
10.17487/RFC5931
Link
https://doi.org/10.17487/RFC5931
Author(s)
Dan Harkins
Glen Zorn
Keyword(s)
Password Authenticated Key Exchange, Dictionary Attack, Authentication EAP
Latest version of IETF RFC 5931

Document Versions — IETF RFC 5931

  • ▶ IETF RFC 5931 (2010-08-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:
  • RFC8146 NOT IN REGISTRY

Normative Reference(s)

Bibliographic Reference(s)

  • 10.1145-242896.242897 — 5 EXTERNAL
  • ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
  • NIST FIPS 197 [Superseded]
  • Lucks, S., "Open Key Exchange: How to Defeat Dictionary Attacks Without Encrypting Public Keys", Proceedings of the Security Protocols Workshop, LNCS 1361, Springer- Verlag, 1997. EXTERNAL
  • Bellovin, S. and M. Merritt, "Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attack", Proceedings of the IEEE Symposium on Security and Privacy, Oakland, 1992. EXTERNAL
  • Bellare, M. and P. Rogaway, "Random Oracles are Practical: A Paradigm for Designing Efficient Protocols", Proceedings of the 1st ACM Conference on Computer and Communication Security, ACM Press, 1993. EXTERNAL
  • Boyko, V., MacKenzie, P., and S. Patel, "Provably Secure Password Authenticated Key Exchange Using Diffie- Hellman", Proceedings of Eurocrypt 2000, LNCS 1807 Springer-Verlag, 2000. EXTERNAL
  • Bellovin, S. and M. Merritt, "Augmented Encrypted Key Exchange: A Password-Based Protocol Secure against Dictionary Attacks and Password File Compromise", Proceedings of the 1st ACM Conference on Computer and Communication Security, ACM Press, 1993. EXTERNAL
  • IETF RFC 2409 [Superseded*]
  • IETF RFC 3766 [Active*]
  • IETF RFC 4017 [Active*]
  • IETF RFC 4086 [Active*]
  • IETF RFC 4962 [Active*]
  • IETF RFC 5114 [Active*]
  • IETF RFC 5216 [Active*]
  • IETF RFC 5247 [Active*]
  • IETF RFC 5869 [Active*]
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5931.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5931, Extensible Authentication Protocol (EAP) Authentication Using Only a Password. Available at https://doi.org/10.17487/RFC5931
Snippet:
IETF RFC 5931, Extensible Authentication Protocol (EAP) Authentication Using Only a Password. Available at https://doi.org/10.17487/RFC5931

HTML (ISO 690 compliant)

Preview:
IETF RFC 5931, Extensible Authentication Protocol (EAP) Authentication Using Only a Password. Available at https://doi.org/10.17487/RFC5931
Snippet:
<span class="citation"><cite>IETF RFC 5931</cite>, Extensible Authentication Protocol (EAP) Authentication Using Only a Password. Available at <a href="https://doi.org/10.17487/RFC5931" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5931</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5931, Extensible Authentication Protocol (EAP) Authentication Using Only a Password
doi: 10.17487/RFC5931
url: https://doi.org/10.17487/RFC5931
Snippet:
<li>
<cite id="bib-rfc5931">IETF RFC 5931</cite>, Extensible Authentication Protocol (EAP) Authentication Using Only a Password
<span class="doi">10.17487/RFC5931</span>
</li>

Referenced By