I'm studying how WPA-TKIP works. As I understand, there are two parts to authentication.
Using EAP messages the client authenticates itself to the access point or authorization/RADIUS server. I believe this is using EAP-TLS, is that correct?
Using the four way handshake, the client and access point calculate temporal keys and authenticate each other.
Are these steps correct, and is this the correct order? Also why isn't the second step used first to establish a secure connection before authenticating to the RADIUS server?