EAP Invariants Media independence EAP methods are designed to function on any lower layer meeting criteria in RFC 2284bis, Section 3.1 Ciphersuite independence Ciphersuite negotiation occurs out of band of EAP EAP methods generate Master Session Keys (MSKs) that are suitable for use with any ciphersuite Method independence Pass-through authenticators cannot be assumed to implement method-specific code |