Re: [SECMECH] Framework Bindings Vs. Mechanism Bridges

[Jari Arkko <[e-mail]>]

Nicolas Williams wrote:

>So, there could (should?) be a standard framework for transporting key
>material from the EAP server to the NAS, yes?  Is this covered in the
>EAP key management I-D?  Or does every EAP method have to provide its
>own EAP-server-->NAS key transport protocol?
>  
>
EAP keying framework explains how the system works
regarding methods, eap, clients, nases, an authentication
servers. It also analyses the security properties. But the
actual key transport is defined in the AAA space. There's
only one proposed standard for this (Diameter EAP), and
one old vendor-specific attribute for RADIUS.

So, from the point of view of the methods, they just export
a key, and AAA will transport it to the NAS.

--Jari


_______________________________________________
SECMECH mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/secmech