Re: [Emu] EAP-SIM/AKA and missing Session-Id derivation rules for fast reauth

2017-12-21 Thread Jari Arkko
Thanks for bringing this up, Jouni. I agree that this need to be specified somehow. (Another possible way to document this is to put it in the revision that we were planning for EAP-AKA’.) Jari ___ Emu mailing list Emu@ietf.org https://www.ietf.org/m

Re: [Emu] EAP-SIM/AKA and missing Session-Id derivation rules for fast reauth

2017-12-15 Thread Alan DeKok
On Dec 15, 2017, at 9:05 AM, Jouni Malinen wrote: > > It looks like EAP Session-Id derivation has not been defined for > EAP-SIM, EAP-AKA, and EAP-AKA' when using the fast re-authentication > exchange instead of full authentication. RFC 5247 defines Session-Id for > these EAP methods, but that de

[Emu] EAP-SIM/AKA and missing Session-Id derivation rules for fast reauth

2017-12-15 Thread Jouni Malinen
It looks like EAP Session-Id derivation has not been defined for EAP-SIM, EAP-AKA, and EAP-AKA' when using the fast re-authentication exchange instead of full authentication. RFC 5247 defines Session-Id for these EAP methods, but that derivation is only applicable for the full authentication case.