RFC 5931

"Extensible Authentication Protocol (EAP) Authentication Using Only a Password", August 2010

Canonical URL:

http://www.rfc-editor.org/rfc/rfc5931.txt
This document is also available in this non-normative format: PDF.

Status:

INFORMATIONAL

Authors:

D. Harkins
G. Zorn

Stream:

IETF

Source:

NON WORKING GROUP

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

This memo describes an Extensible Authentication Protocol (EAP) method, EAP-pwd, which uses a shared password for authentication. The password may be a low-entropy one and may be drawn from some set of possible passwords, like a dictionary, which is available to an attacker. The underlying key exchange is resistant to active attack, passive attack, and dictionary attack. This document is not an Internet Standards Track specification; it is published for informational purposes.

For the definition of Stream, see RFC 4844.