EAP Key Management Framework draftietfeapkeying01

1
EAP Key Management Framework(draft-ietf-eap-keyin
g-01)

• Bernard Aboba, Dan Simon, Jari Arkko, Henrik
  Levkowetz, Pasi Eronen

2
Status

• Not updated since IETF58
• Several open issues, some with proposed text
• Bernard is working on a new version

3
Issue 220 AAA-Key vs MSK

• In normal 802.11i, AAA-KeyMSK
• Consensus on following?
• Lying NAS problem is not urgent
• It is better solved by providing channel
  bindings in EAP method than specifying
  AAA-KeyPRF()

4
Issue 221 EMSK

• draft-salowey-eap-key-deriv-02 will be included
  in this document
• Specifies how to derive additional keys from EMSK
• IKEv2 prf with HMAC-SHA1
• Specify that some future EAP method may negotiate
  another PRF?
• Then method has to export the PRF function in
  addition to EMSK?