eap Mailing List: RE: Re: EAP-TLS

[Vijay Govindarajulu (vgovindarajulu]

Hi there 

 

   The Calculation is done in accordance to section 3.5.Key derivation in
RFC 2716. Note: I am using the Stream Cipher and NOT block cipher.
 
            After this calculation is done the following happens
 

            1) First 32 bytes is the unencrypted value for "MPPE-Recv-Key"

 

2) Last 32 bytes is the unencrypted value for "MPPE-Send-Key"

 

3) I do the encryption on these values as described in RFC 2548 section2.4.2
and 2.4.3

 

Thanks and regards

 

Vijay Kumar Govindarajulu

 

 

 

  _____  

From: eap-admin [at] frascone.com [mailto:eap-admin [at] frascone.com] On 
Behalf Of
Bernard Aboba
Sent: Monday, August 16, 2004 8:46 PM
To: eap [at] frascone.com
Subject: [eap] Re: EAP-TLS

 

> 1) generate 64 bytes using 
> 
> PRF(master key,"client EAP encryption",client Rand , server Rand); 

How are you doing this calculation? 

MS-MPPE-Send-Key = NAS -> Remote Host master key (second 32 octets) 
MS-MPPE-Recv-Key = Remote Host -> NAS master key (first 32 octets) 
_______________________________________________ 
eap mailing list 
eap [at] frascone.com 
http://mail.frascone.com/mailman/listinfo/eap
<http://mail.frascone.com/mailman/listinfo/eap>