20 Sep
2018
20 Sep
'18
11 a.m.
On Thu, Sep 20, 2018 at 10:46:45AM -0400, Alan DeKok wrote:
Now I wonder whether EAP-PWD, which uses a PSK per user, also provides forward secrecy? My assumption is that it doesn't.
Forward secrecy depends on the cipher suite you select. So "it all depends" is the best answer.
I just discussed on the #freeradius irc channel: Apparently EAP-PWD always guarantees forward secrecy. https://tools.ietf.org/html/rfc5931#page-35 7.b.2. (Security claims) Cheers HC