Re: New Radius/Diameter authentication and key delivery for FMIP application

[Jari Arkko <jari.arkko@piuha.net>]

Nelson, David wrote:

>Does anyone know how this work is different from the RADIUS KeyWrap and
>RADIUS KeyReq work that Glen Zorn as proposed (and likely implemented)?
>
>http://www.ietf.org/internet-drafts/draft-zorn-radius-keywrap-10.txt
>
>http://www.ietf.org/internet-drafts/draft-zorn-radius-keyreq-06.txt
>  
>
My understanding is that the Zorn proposal is a free-standing, separate
keying transaction that assumes the existence of a prior, regular AAA
transaction such as EAP over RADIUS.

Vidya's proposal combines both the authentication and the key
request aspects in the one 2-message exchange. It cannot
handle EAP or any other type of authentication; it relies on
its own authentication scheme.

--Jari