eap Mailing List: Re: Issue: AAA-Key should be derived from AMSK

[Florent Bersani (florent.bersani]

Joseph Salowey wrote:

> Florent Bersani wrote:
>  
>
> > A quick comment in-line
> >
> > Joseph Salowey wrote:
> >
> >    
> >
> > > ...
> > > "Where keying material is provided by the backend
> > >  authentication server, a key hierarchy derived from the EMSK, can
> > >  be used to provide cryptographically separate keying material for
> > > use in   fast handoff. 
> > >
> > >      
> > I do not think that fast handoff is the only application that may
> > benefit from such a scheme... although it is clearly a
> > natural one! So i'd suggest being less specific and saying sth like:
> >
> > "Where keying material is provided by the backend
> >   authentication server, a key hierarchy derived from the
> > EMSK *and the MSK as Jari noted* , can be
> >   used to provide cryptographically separate keying material
> > *for different applications. Fast handoffs are an example
> > application that may benefit from this keying material"
> >
> >    
>
> [Joe] perhaps it should be "the EMSK and/or the MSK" 
>  
that's right