eap Mailing List: EAP-SKL update

[Thomas Otto (t.otto]

EAP-SKL has been updated,

 

http://www.ietf.org/internet-drafts/draft-otto-eap-skl-03.txt

 

 

Rationale.

 

One main problem of embedding existing security protocols in EAP is to match

the EAP message flow. After an EAP Identity exchange, the EAP server begins

the conversation.

 

Assume the underlying protocol is a 4-step protocol,

 

<--

-->

<--

-->

 

<-- EAP-Success

 

then this would match exactly. Some protocols however mandates the peer to

send the first message, then

 

<-- "start"

-->

<--

-->

<--

--> "finish"

 

<-- EAP-Success

 

 

With EAP-SKL, this is slightly different, because it is a 3-step protocol. This can never

incorporated into EAP exactly, so either at the beginning or at the end (before the

EAP server sends an EAP success) an "empty" message has to be inserted.

 

From -02 to -03, I decided to have the first message of the server an empty message,

which could probably carry some informational things, not specified yet.

 

So with EAP-SKL v03 we have

 

<-- "start"

-->

<--

-->

 

<-- EAP-Success

 

 

/Thomas