API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 6124
[ACTIVE]

An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol

Metadata

Publisher
IETF
Doc Type
Informational
Pages
33
Abstract
The Extensible Authentication Protocol (EAP) describes a framework that allows the use of multiple authentication mechanisms. This document defines an authentication mechanism for EAP called EAP-EKE, based on the Encrypted Key Exchange (EKE) protocol. This method provides mutual authentication through the use of a short, easy to remember password. Compared with other common authentication methods, EAP-EKE is not susceptible to dictionary attacks. Neither does it require the availability of public-key certificates. This document is not an Internet Standards Track specification; it is published for informational purposes.
Publication Date
2011-02-01
Status Note
Informational
DOI
10.17487/RFC6124
Link
https://doi.org/10.17487/RFC6124
Author(s)
Yaron Sheffer
Glen Zorn
Hannes Tschofenig
Scott Fluhrer
Keyword(s)
Password-based Authentication, Mutual Authentication, Password-based Cryptography, Password Authenticated Key Exchange, Weak Password Authentication
Latest version of IETF RFC 6124

Document Versions — IETF RFC 6124

  • ▶ IETF RFC 6124 (2011-02-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • 10.1109-RISP.1992.213269 — 4 EXTERNAL
  • 10.1145-242896.242897 — 5 EXTERNAL
  • NIST.SP.800-90 — NIST.800-90.2007 EXTERNAL
  • Carlson, J., Aboba, B., and H. Haverinen, "EAP SRP-SHA1 Authentication Protocol", Work in Progress, July 2001. EXTERNAL
  • Patel, S., "Number Theoretic Attacks On Secure Password Schemes", Proceedings of the 1997 IEEE Symposium on Security and Privacy , 1997. EXTERNAL
  • Bellovin, S. and M. Merritt, "Augmented Encrypted Key Exchange: A Password-Based Protocol Secure against Dictionary Attacks and Password File Compromise", Proc. 1st ACM Conference on Computer and Communication Security , 1993. EXTERNAL
  • Lucks, S., "Open Key Exchange: How to Defeat Dictionary Attacks Without Encrypting Public Keys", Proc. of the Security Protocols Workshop LNCS 1361, 1997. EXTERNAL
  • Black, J. and P. Rogaway, "Ciphers with Arbitrary Finite Domains", Proc. of the RSA Cryptographer's Track (RSA CT '02), LNCS 2271 , 2002. EXTERNAL
  • Boyko, V., MacKenzie, P., and S. Patel, "Provably Secure Password Authenticated Key Exchange Using Diffie-Hellman", Advances in Cryptology, EUROCRYPT 2000 , 2000. EXTERNAL
  • IETF RFC 4017 [Active*]
  • IETF RFC 4086 [Active*]
  • RFC5209 — RFC5209 EXTERNAL
  • IETF RFC 5226 [Superseded*]
  • IETF RFC 5869 [Active*]
  • IETF RFC 5931 [Active*]
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6124.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 6124, An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol. Available at https://doi.org/10.17487/RFC6124
Snippet:
IETF RFC 6124, An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol. Available at https://doi.org/10.17487/RFC6124

HTML (ISO 690 compliant)

Preview:
IETF RFC 6124, An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol. Available at https://doi.org/10.17487/RFC6124
Snippet:
<span class="citation"><cite>IETF RFC 6124</cite>, An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol. Available at <a href="https://doi.org/10.17487/RFC6124" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6124</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 6124, An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol
doi: 10.17487/RFC6124
url: https://doi.org/10.17487/RFC6124
Snippet:
<li>
<cite id="bib-rfc6124">IETF RFC 6124</cite>, An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol
<span class="doi">10.17487/RFC6124</span>
</li>

Referenced By