Adding Support for Salted Password Databases to EAP-pwd

Metadata

Publisher: IETF
Doc Type: Informational
Pages: 11
Abstract: EAP-pwd is an Extensible Authentication Protocol (EAP) method that utilizes a shared password for authentication using a technique that is resistant to dictionary attacks. It includes support for raw keys and double hashing of a password in the style of Microsoft Challenge Handshake Authentication Protocol version 2 (MSCHAPv2), but it does not include support for salted passwords. There are many existing databases of salted passwords, and it is desirable to allow their use with EAP-pwd.
Publication Date: 2017-04-01
Status Note: Informational
DOI: 10.17487/RFC8146
Link: https://doi.org/10.17487/RFC8146
Author(s): Dan Harkins
Keyword(s): PAKE, Dictionary Attack, Authentication EAP

Latest version of IETF RFC 8146

Document Versions — IETF RFC 8146

▶ IETF RFC 8146 (2017-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

NIST FIPS 180-4 [Active]
Linux Programmer's Manual, "CRYPT(3)", August 2015, < http://man7.org/linux/man-pages/man3/crypt.3.html >. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 3454 [Superseded*]
IETF RFC 5931 [Active*]
IETF RFC 7613 [Superseded*]
RFC7914 — RFC7914 EXTERNAL
IETF RFC 8018 [Active*]

Bibliographic Reference(s)

IETF RFC 7616 [Active*]
RFC7664 — RFC7664 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8146.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8146, Adding Support for Salted Password Databases to EAP-pwd. Available at https://doi.org/10.17487/RFC8146

Snippet:

IETF RFC 8146, Adding Support for Salted Password Databases to EAP-pwd. Available at https://doi.org/10.17487/RFC8146

HTML (ISO 690 compliant)

Preview:

IETF RFC 8146, Adding Support for Salted Password Databases to EAP-pwd. Available at https://doi.org/10.17487/RFC8146

Snippet:

<span class="citation"><cite>IETF RFC 8146</cite>, Adding Support for Salted Password Databases to EAP-pwd. Available at <a href="https://doi.org/10.17487/RFC8146" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8146</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8146, Adding Support for Salted Password Databases to EAP-pwd
doi: 10.17487/RFC8146
url: https://doi.org/10.17487/RFC8146

Snippet:

<li>
<cite id="bib-rfc8146">IETF RFC 8146</cite>, Adding Support for Salted Password Databases to EAP-pwd
<span class="doi">10.17487/RFC8146</span>
</li>

Referenced By

IETF RFC 9930 [Active*]