Search RFCs

RFC Editor

File formats:

Status:

INFORMATIONAL

Updates:

RFC 4187

Updated by:

RFC 9048,RFC 9678

Authors:

J. Arkko
V. Lehtovirta
P. Eronen

Stream:

IETF

Source:

NON WORKING GROUP

Cite this RFC:TXT  | XML  |  BibTeX

DOI:  https://doi.org/10.17487/RFC5448

Discuss this RFC: Send questions or comments to the mailing listiesg@ietf.org

Other actions:Submit Errata  | Find IPR Disclosures from the IETF  | View History of RFC 5448

Abstract

This specification defines a new EAP method, EAP-AKA', which is asmall revision of the EAP-AKA (Extensible Authentication ProtocolMethod for 3rd Generation Authentication and Key Agreement) method.The change is a new key derivation function that binds the keysderived within the method to the name of the access network. The newkey derivation mechanism has been defined in the 3rd GenerationPartnership Project (3GPP). This specification allows its use in EAPin an interoperable manner. In addition, EAP-AKA' employs SHA-256instead of SHA-1.

This specification also updates RFC 4187, EAP-AKA, to prevent biddingdown attacks from EAP-AKA'. This memo provides information for the Internet community.

For the definition ofStatus,seeRFC 2026.

For the definition ofStream, seeRFC 8729.