eap-3----Page:4
1  2  3  4  5 

Issue 317: Key Separation
Proposed resolution (posted to the list)
Change “Method-ID” to “Session-ID” in Figure 1.
Remove Figures 3 and 4.
Rewrite Section 2.2 so as to focus on externally visible behavior rather than implementation details
Session-ID exported by EAP method, provided to lower layer
EMSK protected from compromise (not transported, used only via one-way function, etc.)
Strawman with changes applied available at:
http://www.drizzle.com/~aboba/EAP/draft-ietf-eap-keying-11.txt

PPT Version