Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')

Metadata

Publisher: IETF
Doc Type: Standard
Abstract: The 3GPP mobile network Authentication and Key Agreement (AKA) is an authentication mechanism for devices wishing to access mobile networks. RFC 4187 (EAP-AKA) made the use of this mechanism possible within the Extensible Authentication Protocol (EAP) framework. RFC 5448 (EAP-AKA') was an improved version of EAP-AKA. This document is the most recent specification of EAP-AKA', including, for instance, details about and references related to operating EAP-AKA' in 5G networks. EAP-AKA' differs from EAP-AKA by providing a key derivation function that binds the keys derived within the method to the name of the access network. The key derivation function has been defined in the 3rd Generation Partnership Project (3GPP). EAP-AKA' allows its use in EAP in an interoperable manner. EAP-AKA' also updates the algorithm used in hash functions, as it employs SHA-256 / HMAC-SHA-256 instead of SHA-1 / HMAC-SHA-1, which is used in EAP-AKA. This version of the EAP-AKA' specification defines the protocol behavior for both 4G and 5G deployments, whereas the previous version defined protocol behavior for 4G deployments only. While EAP-AKA' as defined in RFC 5448 is not obsolete, this document defines the most recent and fully backwards-compatible specification of EAP-AKA'. This document updates both RFCs 4187 and 5448.
Publication Date: 2021-10-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9048
Link: https://doi.org/10.17487/RFC9048
Author(s): Jari Arkko, Vesa Lehtovirta, Vesa Torvinen, Pasi Eronen
Keyword(s): EAP, AKA, AKA', 3GPP

Latest version of IETF RFC 9048

Document Versions — IETF RFC 9048

▶ IETF RFC 9048 (2021-10-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 9678 [Active*]

Normative Reference(s)

3GPP.TS-23.003.202106 NOT IN REGISTRY
3GPP.TS-23.501.202106 NOT IN REGISTRY
3GPP.TS-24.302.202007 NOT IN REGISTRY
3GPP.TS-24.501.202106 NOT IN REGISTRY
3GPP.TS-33.102.202007 NOT IN REGISTRY
3GPP.TS-33.402.202007 NOT IN REGISTRY
3GPP.TS-33.501.202107 NOT IN REGISTRY
NIST FIPS 180-4 [Active]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
RFC3748 NOT IN REGISTRY
IETF RFC 4187 [Superseded]
RFC7542 NOT IN REGISTRY
RFC8126 NOT IN REGISTRY
RFC8174 NOT IN REGISTRY

Bibliographic Reference(s)

10.1007-978-3-642-33704-8_6 NOT IN REGISTRY
10.1109-TWC.2004.842941 NOT IN REGISTRY
10.1145-2382196.2382221 NOT IN REGISTRY
10.1145-3243734.3243846 NOT IN REGISTRY
10.14722-ndss.2016.23236 NOT IN REGISTRY
10.14722-ndss.2019.23442 NOT IN REGISTRY
10.2478-popets-2019-0039 NOT IN REGISTRY
10.5555-2534748.2534755 NOT IN REGISTRY
3GPP.TS-35.208.202007 NOT IN REGISTRY
IETF.draft-ietf-emu-aka-pfs-05 NOT IN REGISTRY
INTERCEPT.great-sim-heist.2015-02 NOT IN REGISTRY
ISOC.NDSS.GSM.201202 NOT IN REGISTRY
NIST FIPS 180-1 [Withdrawn]
NIST FIPS 180-2 [Withdrawn]
RFC3310 NOT IN REGISTRY
RFC4086 NOT IN REGISTRY
RFC4169 NOT IN REGISTRY
RFC4186 NOT IN REGISTRY
RFC4284 NOT IN REGISTRY
RFC4306 NOT IN REGISTRY
RFC5113 NOT IN REGISTRY
RFC5247 NOT IN REGISTRY
RFC5281 NOT IN REGISTRY
IETF RFC 5448 [Superseded]
RFC6194 NOT IN REGISTRY
RFC6973 NOT IN REGISTRY
RFC7170 NOT IN REGISTRY
RFC7258 NOT IN REGISTRY
RFC7296 NOT IN REGISTRY

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9048.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9048, Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA'). Available at https://doi.org/10.17487/RFC9048

Snippet:

IETF RFC 9048, Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA&#x27;). Available at https://doi.org/10.17487/RFC9048

HTML (ISO 690 compliant)

Preview:

IETF RFC 9048, Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA'). Available at https://doi.org/10.17487/RFC9048

Snippet:

<span class="citation"><cite>IETF RFC 9048</cite>, Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA&#x27;). Available at <a href="https://doi.org/10.17487/RFC9048" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9048</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9048, Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')
doi: 10.17487/RFC9048
url: https://doi.org/10.17487/RFC9048

Snippet:

<li>
<cite id="bib-rfc9048">IETF RFC 9048</cite>, Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA&#x27;)
<span class="doi">10.17487/RFC9048</span>
</li>

Referenced By

IETF RFC 9678 [Active*]