API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7029
[ACTIVE]

Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding

Metadata

Publisher
IETF
Doc Type
Informational
Pages
19
Abstract
As the Extensible Authentication Protocol (EAP) evolves, EAP peers rely increasingly on information received from the EAP server. EAP extensions such as channel binding or network posture information are often carried in tunnel methods; peers are likely to rely on this information. Cryptographic binding is a facility described in RFC 3748 that protects tunnel methods against man-in-the-middle attacks. However, cryptographic binding focuses on protecting the server rather than the peer. This memo explores attacks possible when the peer is not protected from man-in-the-middle attacks and recommends cryptographic binding based on an Extended Master Session Key, a new form of cryptographic binding that protects both peer and server along with other mitigations.
Publication Date
2013-10-01
Status Note
Informational
DOI
10.17487/RFC7029
Link
https://doi.org/10.17487/RFC7029
Author(s)
Sam Hartman
Margaret Cullen
Dacheng Zhang
Keyword(s)
MITM, EMSK Crypto Binding, EMSK, Tunnel
Latest version of IETF RFC 7029

Document Versions — IETF RFC 7029

  • ▶ IETF RFC 7029 (2013-10-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • Cam-Winget, N. and P. Sangster, "PT-EAP: Posture Transport (PT) Protocol For EAP Tunnel Methods", Work in Progress, March 2013. EXTERNAL
  • Hartman, S. and J. Howlett, "A GSS-API Mechanism for the Extensible Authentication Protocol", Work in Progress, August 2012. EXTERNAL
  • Asokan, N., Niemi, V., and K. Nyberg, "Man-in-the-Middle in Tunnelled Authentication Protocols", Cryptology ePrint Archive: Report 2002/163, November 2002. EXTERNAL
  • Zhou, H., Cam-Winget, N., Salowey, J., and S. Hanna, "Tunnel EAP Method (TEAP) Version 1", Work in Progress, September 2013. EXTERNAL
  • IETF RFC 2759 [Active*]
  • IETF RFC 4510 [Active*]
  • IETF RFC 4851 [Active*]
  • IETF RFC 5281 [Active*]
  • IETF RFC 6677 [Active*]
  • IETF RFC 6678 [Active*]
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7029.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7029, Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding. Available at https://doi.org/10.17487/RFC7029
Snippet:
IETF RFC 7029, Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding. Available at https://doi.org/10.17487/RFC7029

HTML (ISO 690 compliant)

Preview:
IETF RFC 7029, Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding. Available at https://doi.org/10.17487/RFC7029
Snippet:
<span class="citation"><cite>IETF RFC 7029</cite>, Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding. Available at <a href="https://doi.org/10.17487/RFC7029" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7029</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7029, Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding
doi: 10.17487/RFC7029
url: https://doi.org/10.17487/RFC7029
Snippet:
<li>
<cite id="bib-rfc7029">IETF RFC 7029</cite>, Extensible Authentication Protocol (EAP) Mutual Cryptographic Binding
<span class="doi">10.17487/RFC7029</span>
</li>

Referenced By