eap Mailing List: Re: Strawman -10

[Bernard Aboba (bernard_aboba]

> In draft-ohba-eap-channel-binding-00.txt, the use of the "Channel
> Binding" key does not need to be negotiated by the lower layer.
> Instead, the negotiation is required by EAP method.

How does the EAP method know whether the link layer is doing "Channel 
Binding" EAP key deriviation or not?  EAP methods are typically link layer 
agnostic, so the keys are computed the same way regardless of media.  Or are 
we saying that the method needs to be able to take the Channel Bindings into 
account in computation of the MSK?  If so, how does it know what Channel 
Bindings are to be used to compute keys with which link layers?  The Channel 
Bindings may not be the same for every link layer.