Nimble Out-of-Band Authentication for EAP (EAP-NOOB)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 51
Abstract: The Extensible Authentication Protocol (EAP) provides support for multiple authentication methods. This document defines the EAP-NOOB authentication method for nimble out-of-band (OOB) authentication and key derivation. The EAP method is intended for bootstrapping all kinds of Internet-of-Things (IoT) devices that have no preconfigured authentication credentials. The method makes use of a user-assisted, one-directional, out-of-band (OOB) message between the peer device and authentication server to authenticate the in-band key exchange. The device must have a nonnetwork input or output interface, such as a display, microphone, speaker, or blinking light, that can send or receive dynamically generated messages of tens of bytes in length.
Publication Date: 2021-12-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9140
Link: https://doi.org/10.17487/RFC9140
Author(s): Tuomas Aura
Mohit Sethi
Aleksi Peltonen
Keyword(s): IoT Security, Cybersecurity, Network Access Authorization, EAP, Key Exchange

Latest version of IETF RFC 9140

Document Versions — IETF RFC 9140

▶ IETF RFC 9140 (2021-12-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 9965 [Active*]

Normative Reference(s)

10.1109-IEEESTD.2014.6847097 — EUI-48 EXTERNAL
NIST FIPS 186-4 [Active]
NIST.SP.800-56Ar3 — KEYAGREEMENT EXTERNAL
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 3748 [Active*]
IETF RFC 4648 [Active*]
IETF RFC 5247 [Active*]
IETF RFC 6234 [Active*]
RFC7517 — JWK EXTERNAL
IETF RFC 7518 [Active*]
IETF RFC 7542 [Active*]
IETF RFC 7748 [Active*]
IETF RFC 8037 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8259 [Active*]

Bibliographic Reference(s)

10.1145-2632048.2632049 — Sethi14 EXTERNAL
10.1145-3321705.3329813 — Sethi19 EXTERNAL
IEEE.STD802.1X.2020 — IEEE-802.1X EXTERNAL
IETF.draft-ietf-rats-eat-11 — I-D.ietf-rats-eat EXTERNAL
IETF.draft-tschofenig-tls-cwt-02 — I-D.tschofenig-tls-cwt EXTERNAL
Bluetooth Special Interest Group, "Bluetooth Core Specification Version 5.3", July 2021, <https://www.bluetooth.com/specifications/bluetooth-core-specification>. EXTERNAL
RFC2904 — RFC2904 EXTERNAL
IETF RFC 3986 [Active, Amended*]
IETF RFC 4137 [Active*]
RFC5056 — 2 EXTERNAL
IETF RFC 5216 [Active*]
IETF RFC 6677 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9140.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9140, Nimble Out-of-Band Authentication for EAP (EAP-NOOB). Available at https://doi.org/10.17487/RFC9140

Snippet:

IETF RFC 9140, Nimble Out-of-Band Authentication for EAP (EAP-NOOB). Available at https://doi.org/10.17487/RFC9140

HTML (ISO 690 compliant)

Preview:

IETF RFC 9140, Nimble Out-of-Band Authentication for EAP (EAP-NOOB). Available at https://doi.org/10.17487/RFC9140

Snippet:

<span class="citation"><cite>IETF RFC 9140</cite>, Nimble Out-of-Band Authentication for EAP (EAP-NOOB). Available at <a href="https://doi.org/10.17487/RFC9140" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9140</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9140, Nimble Out-of-Band Authentication for EAP (EAP-NOOB)
doi: 10.17487/RFC9140
url: https://doi.org/10.17487/RFC9140

Snippet:

<li>
<cite id="bib-rfc9140">IETF RFC 9140</cite>, Nimble Out-of-Band Authentication for EAP (EAP-NOOB)
<span class="doi">10.17487/RFC9140</span>
</li>

Referenced By

IETF RFC 9965 [Active*]