eap Mailing List: RE: Strawman -10

[Nakhjiri Madjid-MNAKHJI1 (Madjid.Nakhjiri]

Madjid>>Again, why is deletion of EMSK after generation of one AMSK is a
requirements. What if we need to create multiple AMSKs and that at
multiple occassions?



Well, actually, lower layer authenticator implementation should expect 
(MSK,EMSK) in the case EAP method is executed by the standalone 
authenticator or (MSK,AMSK) in the case EAP method is executed by 
backend authentication server. If it receives (MSK,EMSK) should create 
AMSK and delete EMSK. If it receives (MSK,AMSK) , that's all, correct?