EAP-FIDO: A Novel EAP Method for Using FIDO2 Credentials for Network Authentication

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Rivera-Dourado, Martiño, Xenakis, Christos, Pazos, Alejandro, Vázquez-Naya, Jose
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916739032285184
author Rivera-Dourado, Martiño
Xenakis, Christos
Pazos, Alejandro
Vázquez-Naya, Jose
author_facet Rivera-Dourado, Martiño
Xenakis, Christos
Pazos, Alejandro
Vázquez-Naya, Jose
contents The adoption of FIDO2 authentication by major tech companies in web applications has grown significantly in recent years. However, we argue FIDO2 has broader potential applications. In this paper, we introduce EAP-FIDO, a novel Extensible Authentication Protocol (EAP) method for use in IEEE 802.1X-protected networks. This allows organisations with WPA2/3-Enterprise wireless networks or MACSec-enabled wired networks to leverage FIDO2's passwordless authentication in compliance with existing standards. Additionally, we provide a comprehensive security and performance analysis to support the feasibility of this approach.
format Preprint
id arxiv_https___arxiv_org_abs_2412_03277
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle EAP-FIDO: A Novel EAP Method for Using FIDO2 Credentials for Network Authentication
Rivera-Dourado, Martiño
Xenakis, Christos
Pazos, Alejandro
Vázquez-Naya, Jose
Cryptography and Security
The adoption of FIDO2 authentication by major tech companies in web applications has grown significantly in recent years. However, we argue FIDO2 has broader potential applications. In this paper, we introduce EAP-FIDO, a novel Extensible Authentication Protocol (EAP) method for use in IEEE 802.1X-protected networks. This allows organisations with WPA2/3-Enterprise wireless networks or MACSec-enabled wired networks to leverage FIDO2's passwordless authentication in compliance with existing standards. Additionally, we provide a comprehensive security and performance analysis to support the feasibility of this approach.
title EAP-FIDO: A Novel EAP Method for Using FIDO2 Credentials for Network Authentication
topic Cryptography and Security
url https://arxiv.org/abs/2412.03277