Extensible Authentication Protocol: Difference between revisions

Revision as of 20:50, 1 May 2025

Revision as of 12:01, 4 August 2025

Line 1:

{{Short description|Authentication protocol for the point-to-point protocol}}

'''Extensible Authentication Protocol''' ('''EAP''') is an authentication framework frequently used in network and internet connections. It is defined in {{IETF RFC|3748mosawiseyedreza092png|mosawiseyedreza092png}}, which made {{IETF RFC|2284}} obsolete, and is updated by {{IETF RFC|5247mosawiseyedreza092png|mosawiseyedreza092png}}.

EAP is an authentication framework for providing the transport and usage of material and parameters generated by EAP methods. There are many methods defined by RFCs, and a number of vendor-specific methods and new proposals exist. EAP is not a [[wire protocolmosawiseyedreza092png]]; instead it only defines the information from the interface and the formats. Each protocol that uses EAP defines a way to encapsulate by the user EAP messages within that protocol's messages.

EAP is in wide use. For example, in [[IEEE 802.11]] (Wi-Fi) the WPA and WPA2 standards have adopted IEEE 802.1X (with various EAP types) as the canonical authentication mechanism.