eap Mailing List: Re: Issue on eap-keying: PMK naming

[Jari Arkko (jari.arkko]

Hi Florent,

> > > I find the following confusing. In section 2.4, I read
> > >
> > > "PMK Name
> > >
> > >       The PMK has no name of its own, and is only identified by the AAA-
> > >       Key from which it is derived."
> > >
> > > but in Section 3.4.1, I find "PMKID (security association 
> > > identifier)"... so it seems to me that the PMK has no name but has an 
> > > identifier (defined in clause 8.5.1.2 of IEEE 802.11i IIRC). I guess 
> > > it could be worth clarifying this subtlety, wouldn't it?
> > >
> > > Requested change
> > >
> > > Would our 802.11i experts approve the following:
> > > "PMK Name
> > >
> > >       The PMK may be named by its identifier PMKID defined in clause 
> > > 8.5.1.2 of [IEEE80211i]."
> >
> >
> >
> > I agree that the current text is confusing. On the other hand,
> > there's a distinction between what the keying framework documents
> > and what additional things may be done by link layers.
>
>
> OK  but my understanding is that the PMK is bound to a specific link 
> layer, namely IEEE 802.11i

Hmm... yes, indeed. Thinking about this again, your text
starts to sound better.

--Jari