ietf-corpus

rfc-9427

TLS-Based Extensible Authentication Protocol (EAP) Types for Use with TLS 1.3

A. DeKok
date2023-06 streamIETF areasec wgemu statusPROPOSED STANDARD pages19 canonicalhttps://www.rfc-editor.org/rfc/rfc9427 doi10.17487/RFC9427
The Extensible Authentication Protocol-TLS (EAP-TLS) (RFC 5216) has been updated for TLS 1.3 in RFC 9190. Many other EAP Types also depend on TLS, such as EAP-Flexible Authentication via Secure Tunneling (EAP-FAST) (RFC 4851), EAP-Tunneled TLS (EAP-TTLS) (RFC 5281), the Tunnel Extensible Authentication Protocol (TEAP) (RFC 7170). It is possible that many vendor-specific EAP methods, such as the Protected Extensible Authentication Protocol (PEAP), depend on TLS as well. This document updates those methods in order to use the new key derivation methods available in TLS 1.3. Additional changes necessitated by TLS 1.3 are also discussed.

updated by

updates