eap Mailing List: RE: Strawman -10/EMSK management entity!!

[Nakhjiri Madjid-MNAKHJI1 (Madjid.Nakhjiri]

 EMSK management component that holds EMSKs, has the KDFs to create
various AMSKs from the EMSK at various times and can accept channel
binding parameters to bind the keys for usage, sounds like a KDC next to
the AAA server...

-----Original Message-----
From: Salowey, Joe [mailto:jsalowey [at] cisco.com] 
Sent: Tuesday, January 31, 2006 7:31 PM
To: Rafa Marin Lopez
Cc: eap [at] frascone.com
Subject: RE: [eap] Strawman -10

 

> -----Original Message-----
> From: Rafa Marin Lopez [mailto:rafa [at] dif.um.es]
> Sent: Tuesday, January 31, 2006 1:47 PM
> To: Salowey, Joe
> Cc: Bernard Aboba; eap [at] frascone.com
> Subject: Re: [eap] Strawman -10
> 
> Then my question is what layer is going to derive keys (i.e. 
> AMSK) from 
> EMSK?   EAP layer?.
> 
[Joe] I would say the EAP layer (if there is such a thing).  If you
don't like the EAP layer then it would be something like an EMSK
management layer or component.  Not the lower layer.