Subject: [eap] question on the scope of the master session keys

From: [email-masked] (John Williams Floroiu)
Date: Wed, 11 Jun 2003 15:05:42 +0200

Hi,

According to my understanding, the link layer encryption (WEP) keys used by (802.11) access points to protect the data 
traffic are in number of four (and they are tried one-by-one until one or none matches). This basically means that the 
encryption keys are neither user nor device specific, but rather common to all clients that attach to a given access point.

However some phrasing like the one above, quoted from draft-ietf-eap-rfc2284bis-03.txt:

    [...] The MSK is used in the derivation of Transient
    Session Keys (TSKs) for the ciphersuite negotiated between
    the EAP peer and authenticator. [...]

suggest that the "authenticator" may configure EAP peer specific TSKs. Is this functionality envisioned to be supported 
by future access points?

Comments would be greatly appreciated.

John.