eap Mailing List: RE: Relationship between AAA-Key and MSK/EMSK

[Nick Petroni (npetroni]

> [Joe] I still think the quantity AAA-Key is not well defined.  I'm not
[np] Joe, I couldn't agree more. I welcome some discussion on the topic.

> quite sure what AAA-key is supposed to represent. What is it used for?
[np] I think it represents the trust relationship between the AP and the
AAA...*something* has to be transferred so that the AP is in the loop.
Where this comes from and how it is used should, indeed, be clearly
defined.

> Today it is used for link-layer-encryption and it is the MSK.  Using
> this key for other purposes may lead to loss of computational
[np] Yes, this is for certain. Is it possible to make the MSK/AAA only for
link-layer-encryption and use the EMSK for all other things? I think you
suggested something similar to this before, but I'm not sure I understood
completely.

> independence and result in problems.   The use of the work AAA-key is
> misleading in the context it is currently being used. I think it would
[np] yeah, I think AAA key is the wrong term as well.

Regards,
nick