eap-8 Page:16
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17 

Security Claims
Mechanism: Depends on GSS-API mechanism (Kerberos: Passwords, Certs, Token cards)
Mutual/one-way auth: typically mutual (Kerberos: Mutual)
Key derivation
1. Supported: yes
2. Key size: depends on GSS-API method negotiated
3. Key hierarchy description: no
Dictionary attack resistance: depends on method (Kerberos: no)
Identity hiding: Depends on method (Kerberos: no)
Protection
1. Method negotiation: Yes (SPNEGO)
2. Ciphersuite negotiation: No
3. Success/failure indication: No
4. Method packets: Yes
Fast reconnect: depends on method (Kerberos: no)

PPT Version