<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet type="text/xsl" href="eap-eke.xsl"?>
<?xml-model href="eap-eke.rng" schematypens="http://relaxng.org/ns/structure/1.0" ?>
<registry xmlns="http://www.iana.org/assignments" id="eap-eke">
  <title>Extensible Authentication Protocol (EAP) Encrypted Key Exchange (EKE) Registry</title>
  <created>2010-11-24</created>
  <updated>2020-04-14</updated>

  <registry id="diffie-hellman">
    <title>EAP-EKE Diffie-Hellman Group Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Joseph Salowey</expert>
    <record>
      <type>0</type>
      <name>Reserved</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>1</type>
      <name>DHGROUP_EKE_2</name>
      <description>The prime number of the 1024-bit Group 2 <xref type="rfc" data="rfc7296"/>, 
        with the generator 5 (decimal)</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>2</type>
      <name>DHGROUP_EKE_5</name>
      <description>The prime number of the 1536-bit Group 5 <xref type="rfc" data="rfc3526"/>, 
        g=31</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>3</type>
      <name>DHGROUP_EKE_14</name>
      <description>The prime number of the 2048-bit Group 14 <xref type="rfc" data="rfc3526"/>, 
        g=11</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>4</type>
      <name>DHGROUP_EKE_15</name>
      <description>The prime number of the 3072-bit Group 15 <xref type="rfc" data="rfc3526"/>, 
        g=5</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>5</type>
      <name>DHGROUP_EKE_16</name>
      <description>The prime number of the 4096-bit Group 16 <xref type="rfc" data="rfc3526"/>, 
        g=5</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>6-127</type>
      <name>Unassigned</name>
      <description/>
    </record>
    <record>
      <type>128-255</type>
      <name>Reserved for Private Use</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>
  
  
  
  <registry id="encryption-algorithm">
    <title>EAP-EKE Encryption Algorithm Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Joseph Salowey</expert>
    <record>
      <type>0</type>
      <name>Reserved</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>1</type>
      <name>ENCR_AES128_CBC</name>
      <description>AES with a 128-bit key, CBC mode</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>2-127</type>
      <name>Unassigned</name>
      <description/>
    </record>
    <record>
      <type>128-255</type>
      <name>Reserved for Private Use</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>


  <registry id="pseudo-random">
    <title>EAP-EKE Pseudo Random Function Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Joseph Salowey</expert>
    <record>
      <type>0</type>
      <name>Reserved</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>1</type>
      <name>PRF_HMAC_SHA1</name>
      <description>HMAC SHA-1, as defined in <xref type="rfc" data="rfc2104"/> </description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>2</type>
      <name>PRF_HMAC_SHA2_256</name>
      <description>HMAC SHA-2-256 [National Institute of Standards and Technology, U.S. 
        Department of Commerce, "Secure Hash Standard", NIST FIPS 180-3, October 2008.]
      </description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>3-127</type>
      <name>Unassigned</name>
      <description/>
    </record>
    <record>
      <type>128-255</type>
      <name>Reserved for Private Use</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>
  
  
  <registry id="keyed-message">
    <title>EAP-EKE Keyed Message Digest (MAC) Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Joseph Salowey</expert>
    <record>
      <type>0</type>
      <name>Reserved</name>
      <length/>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>1</type>
      <name>MAC_HMAC_SHA1</name>
      <length>20</length>
      <description>HMAC SHA-1, as defined in <xref type="rfc" data="rfc2104"/></description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>2</type>
      <name>MAC_HMAC_SHA2_256</name>
      <length>32</length>
      <description>HMAC SHA-2-256</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>3-127</type>
      <name>Unassigned</name>
      <length/>
      <description/>
    </record>
    <record>
      <type>128-255</type>
      <name>Reserved for Private Use</name>
      <length/>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>
  
  
  <registry id="identity-type">
    <title>EAP-EKE Identity Type Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Joseph Salowey</expert>
    <record>
      <type>0</type>
      <name>Reserved</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>1</type>
      <name>ID_OPAQUE</name>
      <description>An opaque octet string</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>2</type>
      <name>ID_NAI</name>
      <description>A Network Access Identifier, as defined in <xref type="rfc" data="rfc4282"/></description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>3</type>
      <name>ID_IPv4</name>
      <description>An IPv4 address, in binary format</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>4</type>
      <name>ID_IPv6</name>
      <description>An IPv6 address, in binary format</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>5</type>
      <name>ID_FQDN</name>
      <description>A fully qualified domain name
      </description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>6</type>
      <name>ID_DN</name>
      <description>An LDAP Distinguished Name formatted as a string, as defined in <xref type="rfc" data="rfc4514"/></description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>7-127</type>
      <name>Unassigned</name>
      <description/>
    </record>
    <record>
      <type>128-255</type>
      <name>Reserved for Private Use</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>

  <registry id="eap-eke-channel">
    <title>EAP-EKE Channel-Binding Type Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>Specification Required</registration_rule>
    <expert>Joseph Salowey</expert>
    <record>
      <value>0x0000</value>
      <description>Reserved</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <value>0x0001-0xFEFF</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>0xFF00-0xFFFF</value>
      <description>Reserved for Private Use</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>
  
  <registry id="exchange">
    <title>EAP-EKE Exchange Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>RFC Required</registration_rule>
    <record>
      <value>0x00</value>
      <description>Reserved</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <value>0x01</value>
      <description>EAP-EKE-ID exchange</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <value>0x02</value>
      <description>EAP-EKE-Commit exchange</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <value>0x03</value>
      <description>EAP-EKE-Confirm exchange</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <value>0x04</value>
      <description>EAP-EKE-Failure exchange</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <value>0x05-0x7F</value>
      <description>Unassigned</description>
    </record>
    <record>
      <value>0x80-0xFF</value>
      <description>Reserved for Private Use</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>

  <registry id="failure-code">
    <title>EAP-EKE Failure-Code Registry</title>
    <xref type="rfc" data="rfc6124"/>
    <registration_rule>RFC Required</registration_rule>
    <record>
      <type>0x00000000</type>
      <name>Reserved</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000001</type>
      <name>No Error</name>
      <description>This code is used for failure acknowledgement.</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000002</type>
      <name>Protocol Error</name>
      <description>A failure to parse or understand a protocol message or one of its
      payloads.</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000003</type>
      <name>Password Not Found</name>
      <description>A password could not be located for the identity presented by the other
        protocol party, making authentication impossible.
      </description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000004</type>
      <name>Authentication Failure</name>
      <description>Failure in the cryptographic computation most likely caused by 
        an incorrect password, or an inappropriate identity type.</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000005</type>
      <name>Authorization Failure</name>
      <description>While the password being used is correct, the user is not authorized
       to connect.</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000006</type>
      <name>No Proposal Chosen</name>
      <description>The peer is unwilling to select any of the cryptographic proposals 
      offered by the server.</description>
      <xref type="rfc" data="rfc6124"/>
    </record>
    <record>
      <type>0x00000007-0xFEFFFFFF</type>
      <name>Unassigned</name>
      <description/>
    </record>
    <record>
      <type>0xFF000000-0xFFFFFFFF</type>
      <name>Reserved for Private Use</name>
      <description/>
      <xref type="rfc" data="rfc6124"/>
    </record>
  </registry>
  
  <people/>
  
</registry>
