eap Mailing List: RE: Re: EAP-Keying Draft Issues

[Bernard Aboba (aboba]

Right.  So the question is whether 802.11i/EAP can be "properly
configured" and if not, what changes need to be made to enable this.

On Sun, 10 Oct 2004, Russ Housley wrote:

> Bernard:
>
> There are many cases where protocols can be used in a manner that is
> FIPS-compliant and also used in a manner that is not.  Last week, NIST
> published some draft guidance about TLS, but I have not had an opportunity
> to review it in detail yet, but it does say:
>
>     While SSL 3.0 is the most secure of the SSL protocol versions, it is
> not approved for use in the protection of Federal information because it
> relies in part on the use of cryptographic algorithms that are not
> FIPS-Approved. TLS when properly configured is approved for the
> protection of Federal information.
>
> The document includes recommended cipher suites for the protection of
> government information.
>
> I do not think that NIST has published similar documentation for IPsec.
>
> Russ