The EAP-TLS Authentication Protocol

Simon, D.; Aboba, B.; Hurst, R.

doi:10.17487/rfc5216

Cited by 145 publications

(119 citation statements)

References 7 publications

Supporting

Mentioning

112

Contrasting

Unclassified

Order By: Relevance

“…This process allows the supplicant to maintain its privacy as it does not disclose its authentication credentials to an intermediate AP or AN, but ensures that these are only transmitted to the AAA server over the tunnel they have established. Of particular importance for our research are EAP-TLS [13] and EAP-TTLS [5]. During Phase 2, where the AAA server authenticates the client, EAP-TLS uses a client's certificate, whereas EAP-TTLS uses a password in a hashed format, usually dictated by another authentication mechanism such as CHAP.…”

Section: Tls Based Authentication Methodsmentioning

confidence: 99%

A Collaborative AAA Architecture to Enable Secure Real-World Network Mobility

2011

View full text Add to dashboard Cite

Abstract. Mobile Networks are emerging in the real world in various scenarios, from networks in public transportation to personal networks in consumer electronics. The NEMO BS protocol provides constant network connectivity and reachability for the nodes of these Mobile Networks in a seamless manner despite their roaming. However, NEMO BS has yet to show its advantages in real world deployment because it lacks troublefree and secure network access for the whole network, and secure data transmission for the nodes it provides connectivity for. On the other hand, Access Networks provide connectivity for Mobile Networks, but currently lack a robust AAA service which would enable network mobility support in a fast, trouble-free, but also secure and authenticated manner. Our paper describes a collaborative Unified Architecture that satisfies the requirements of both Mobile Networks and Access Networks, and our evaluation proves its efficiency and applicability for real world deployment in today's Internet infrastructure.

show abstract

Section: Tls Based Authentication Methodsmentioning

confidence: 99%

A Collaborative AAA Architecture to Enable Secure Real-World Network Mobility

2011

View full text Add to dashboard Cite

show abstract

“…o Extensible Authentication Protocol-TLS (EAP-TLS) [RFC5216] MUST be used at the next layer to carry the TLS records for the authentication protocol.…”

Section: Authentication Stackmentioning

confidence: 99%

Applicability Statement: The Use of the Routing Protocol for Low-Power and Lossy Networks (RPL) Protocol Suite in Home Automation and Building Control

Cragie¹,

Stok²,

Brandt³

et al. 2016

View full text Add to dashboard Cite

“…The Wireless Protected Access 802.11i (WPA / WPA2) protocol [20] requires AES in two-pass CCM [29] mode to implement its CCMP protocol and SHA-1 [30] for key derivation. Furthermore TLS-based EAP-TLS [31] authentication is recommended.…”

Section: Legacy Record and Transport Protocolsmentioning

confidence: 99%

Beyond Modes: Building a Secure Record Protocol from a Cryptographic Sponge Permutation

Saarinen

2014

Topics in Cryptology – CT-RSA 2014

View full text Add to dashboard Cite

Abstract. BLINKER is a light-weight cryptographic suite and record protocol built from a single permutation. Its design is based on the Sponge construction used by the SHA-3 algorithm KECCAK. We examine the SpongeWrap authenticated encryption mode and expand its padding mechanism to offer explicit domain separation and enhanced security for our specific requirements: shared secret half-duplex keying, encryption, and a MAC-and-continue mode. We motivate these enhancements by showing that unlike legacy protocols, the resulting record protocol is secure against a two-channel synchronization attack while also having a significantly smaller implementation footprint. The design facilitates security proofs directly from a single cryptographic primitive (a single security assumption) rather than via idealization of multitude of algorithms, paddings and modes of operation. The protocol is also uniquely suitable for an autonomous or semiautonomous hardware implementation of protocols where the secrets never leave the module, making it attractive for smart card and HSM designs.

show abstract

The EAP-TLS Authentication Protocol

Cited by 145 publications

References 7 publications

A Collaborative AAA Architecture to Enable Secure Real-World Network Mobility

A Collaborative AAA Architecture to Enable Secure Real-World Network Mobility

Applicability Statement: The Use of the Routing Protocol for Low-Power and Lossy Networks (RPL) Protocol Suite in Home Automation and Building Control

Beyond Modes: Building a Secure Record Protocol from a Cryptographic Sponge Permutation

Contact Info

Product

Resources

About