If someone run a successful EAP-EKE for authentication with a RADIUS Server, the client will end up being authenticated (will have access to the network) and will have in place a session key that at the best of my knowledge will be shared only between RADIUS Server and Client.

What is the use of this key? Client won't need to talk to the Radius server again and thus won't need to encrypt anything, so why is EAP-EKE used? (please extend the answer to any other EAP protocol that derive keys).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.