[Emu] FW: New Version Notification for draft-rich-radext-wlan-security-profile-00.txt

["Harkins, Dan" <[e-mail]>]

  Hello emu,

  There’s a new I-D out that may be of interest. It defines a new RADIUS attribute for WLAN security profile, which is being used to indicate the parameter set of use in the upcoming PQC addition to 802.11 (i.e. 11bt). Currently, the WLAN-AKM-Suite attribute is used to indicate the negotiated authentication algorithm but the AKM is being overloaded now and does not uniquely indicate the authentication nor the particular ML-KEM parameter suite being negotiated with that AKM. Hence the security profile attribute.

  Please take a look and send comments to [e-mail] (copying Ken and myself if you like).

  Regards,

  Dan.

--
“the object of life is not to be on the side of the majority, but to
escape finding oneself in the ranks of the insane.” – Marcus Aurelius

On 8/6/26, 1:47 PM, "[e-mail]" <[e-mail]> wrote:

A new version of Internet-Draft draft-rich-radext-wlan-security-profile-00.txt
has been successfully submitted by Ken Rich and posted to the
IETF repository.

Name:     draft-rich-radext-wlan-security-profile
Revision: 00
Title:    RADIUS Attribute for IEEE 802.11 WLAN Security Profiles
Date:     2026-08-06
Group:    Individual Submission
Pages:    12
URL:      https://www.ietf.org/archive/id/draft-rich-radext-wlan-security-profile-00.txt
Status:  https://datatracker.ietf.org/doc/draft-rich-radext-wlan-security-profile/
HTML:     https://www.ietf.org/archive/id/draft-rich-radext-wlan-security-profile-00.html
HTMLized: https://datatracker.ietf.org/doc/html/draft-rich-radext-wlan-security-profile

Abstract:

   RADIUS has attributes that let an IEEE 802.11 authenticator report
   the AKM suite and pairwise cipher selected for an association.  That
   is useful, but it is not enough anymore.  IEEE 802.11, as amended,
   also defines security profiles.  A security profile is the complete
   set of AKM, pairwise cipher, and related security capabilities
   accepted for an association.

   The problem is that the AKM and the pairwise cipher no longer maps to
   a single security profile.  Using these two values, the RADIUS server
   cannot tell which of the security profiles was accepted.

   This document defines the WLAN-Security-Profile RADIUS attribute.
   The attribute reports the IEEE 802.11 security profile accepted by
   the responder for the association.  It complements the existing IEEE
   802 network attributes.



The IETF Secretariat