caa a22 4500 445296933 CHVBK 20180317142544.0 cr unu---uuuuu 170323e20100601xx s 000 0 eng 10.1007/s12243-009-0135-9 doi (NATIONALLICENCE)springer-10.1007/s12243-009-0135-9 An EAP-EHash authentication method adapted to resource constrained terminals [Elektronische Daten] [Omar Cheikhrouhou, Maryline Laurent, Amin Abdallah, Maher Jemaa] In the era of mobile and wireless networks, the growing complexity of end devices and the accentuated tendency towards miniaturization of them raise new security challenges. Authentication is a crucial concern in resource constrained environments, and despite the great number of existing EAP methods, as explained in the article, we are still in need for EAP methods tightly adapted to wireless environments and satisfying heterogeneity of terminals and their limitations of resources. After a first comparative analysis of existing EAP methods, this article presents a new EAP-EHash method (EHash for encrypted hash) that is adapted to the highly vulnerable wireless environment by supporting mutual authentication and session key derivation and offering simplicity, rapidity, and easy-to-deploy features. This EAP-EHash was formally proven to satisfy the claimed security properties, thanks to the AVISPA tool. Implementation of it on an 802.11 testbed platform gave realistic authentication delays averaging 26ms and thus proved that EAP-EHash is competitive to EAP-MD5 that is known to be the simplest of the EAP methods. Features of EAP-EHash include short execution delays and low bandwidth consumption, and as such, it appears attractive for wireless. Institut TELECOM and Springer-Verlag, 2009 EAP nationallicence EAP methods nationallicence EAP-MD5 nationallicence EAP-TLS nationallicence EAP-EHash nationallicence Authentication protocol nationallicence Validation nationallicence AVISPA nationallicence 3DES : Triple DES nationallicence AAA : Authentication, authorization, accounting nationallicence AK : Authentication key nationallicence AP : Access point nationallicence AS : Authentication server nationallicence AVISPA : Automated validation of internet security protocols and applications nationallicence CPU : Central processing unit nationallicence DES : Data encryption standard nationallicence DoS : Denial of service nationallicence EAP : Extensible authentication protocol nationallicence EHash : Encrypted hash nationallicence EK : Encryption key nationallicence EP : Enforcement point nationallicence IKEv2 : Internet Key Exchange version 2 nationallicence KDK : Key derivation key nationallicence MK : Master key nationallicence MD5 : Message digest 5 nationallicence MIC : Message integrity check nationallicence MITM : Man-in-the-middle nationallicence PKI : Public key infrastructure nationallicence PMK : Pairwise master key nationallicence PRF : Pseudo-random function nationallicence PSK : Pre-shared key nationallicence PTK : Pairwise transient key nationallicence SHA-1 : Secure hash algorithm-1 nationallicence Cheikhrouhou Omar Ecole Nationale d'Ingénieurs de Sfax, Unité de recherche ReDCAD, BP W 3038, Sfax, Tunisia aut Laurent Maryline Institut TELECOM, TELECOM SudParis, CNRS Samovar UMR 5157-9 rue Charles Fourier, 91011, Evry, France aut Abdallah Amin Institut TELECOM, TELECOM SudParis, CNRS Samovar UMR 5157-9 rue Charles Fourier, 91011, Evry, France aut Jemaa Maher Ecole Nationale d'Ingénieurs de Sfax, Unité de recherche ReDCAD, BP W 3038, Sfax, Tunisia aut annals of telecommunications - annales des télécommunications Springer-Verlag 65/5-6(2010-06-01), 271-284 0003-4347 65:5-6<271 2010 65 12243 https://doi.org/10.1007/s12243-009-0135-9 text/html Onlinezugriff via DOI 1 research-article jats NATIONALLICENCE 856 40 https://doi.org/10.1007/s12243-009-0135-9 text/html Onlinezugriff via DOI NATIONALLICENCE 700 1- Cheikhrouhou Omar Ecole Nationale d'Ingénieurs de Sfax, Unité de recherche ReDCAD, BP W 3038, Sfax, Tunisia aut NATIONALLICENCE 700 1- Laurent Maryline Institut TELECOM, TELECOM SudParis, CNRS Samovar UMR 5157-9 rue Charles Fourier, 91011, Evry, France aut NATIONALLICENCE 700 1- Abdallah Amin Institut TELECOM, TELECOM SudParis, CNRS Samovar UMR 5157-9 rue Charles Fourier, 91011, Evry, France aut NATIONALLICENCE 700 1- Jemaa Maher Ecole Nationale d'Ingénieurs de Sfax, Unité de recherche ReDCAD, BP W 3038, Sfax, Tunisia aut NATIONALLICENCE 773 0- annals of telecommunications - annales des télécommunications Springer-Verlag 65/5-6(2010-06-01), 271-284 0003-4347 65:5-6<271 2010 65 12243 Metadata rights reserved Springer special CC-BY-NC licence nationallicence BK010053 XK010053 XK010000 NATIONALLICENCE NATIONALLICENCE NL-springer