Re: issue: aaa-key confusion (review of eap-keying-08 by matsnaslund)
From: Jari Arkko (jari.arkkopiuha.net)
Date: Wed, 30 Nov 2005 22:07:51 -0800 (PST)

So yes, the MSK must be transported as a consequence of mode independence. And yes, AAA-Key = MSK, but this is a tautology, not a consequence of any principle.

Yes.


I think it is more correct to say that "all keys which are required by the lower layer need to be transported from the server to the authenticator", and leave the term "AAA-Key" out of it.

Works for me.


--Jari


Results generated by Tiger Technologies using MHonArc.