eap Mailing List: I-D ACTION:draft-nystrom-eap-potp-02.txt (fwd)

[Magnus Nystrom (magnus]

Dear All,

Internet-Drafts [at] ietf.org wrote:

> A New Internet-Draft is available from the on-line Internet-Drafts 
> directories.
>
>
> 	Title		: The Protected One-Time Password Protocol 
>                         (EAP-POTP)
> 	Author(s)	: M. Nystrom
> 	Filename	: draft-nystrom-eap-potp-02.txt
> 	Pages		: 72
> 	Date		: 2005-7-5

>  This document describes a general EAP method suitable for use with
>  One-Time Password (OTP) tokens, in particular tokens with direct
>  electronic interfaces to their associated clients.  The method can be
>  used to provide unilateral or mutual authentication, and key
>  material, in protocols utilizing EAP, such as PPP, IEEE 802.1X and
>  IKEv2.
>
> A URL for this Internet-Draft is: 
> http://www.ietf.org/internet-drafts/draft-nystrom-eap-potp-02.txt

Changes compared to version -01 include:

-Slightly modified method to calculate MACs - excluding common EAP header
 fields "Code", "Identifier" and "Length"

-New 'A' bit in OTP TLV to signal request for OTP after accepting new PIN

-Session resumption also for basic mode

Feedback and comments on this EAP method is welcome and solicited, please 
use the OTPS mailing list (see 
http://www.rsasecurity.com/rsalabs/node.asp?id=2829)

Thanks to those who provided feedback on the previous version,
-- Magnus