eap-5----Page:3
1  2  3  4  5  6  7  8  9 

Goals
Design a candidate for a better EAP default:
Based on a long-lived pre-shared secret
Light weight; no public key operations
Mutual authentication
Prevent man-in-the-middle attacks
Protect against dictionary attacks if key is not weak
Guarantee a fresh session key
PPT Version