HP-UX AAA Server A.08.02 Administrator's Guide

• Protected EAP (PEAP): Functionally very similar to TTLS, but does not encapsulate legacy
authentication methods. PEAP features include: Dynamic Key Exchange; Mutual Authentication;
and, Encrypted Tunnelling.
• Message Digest 5 (MD5): Passwords are hashed using the MD5 algorithm. Can be deployed
for protecting access to LAN switches where the authentication traffic will not be transmitted
over airwaves. Can also be safely deployed for wireless authentication inside EAP tunnel
methods. The main feature in MD5 is Password-based Authentication.
• Generic Token Card (GTC): Carries user specific token cards for authentication. The main
feature in GTC is Digital Certificate/Token Card-based Authentication.
• EAP MS-CHAP: Passwords are hashed using a Microsoft algorithm. Can be deployed for
protecting access to LAN switches where the authentication traffic will not be transmitted over
airwaves. Can also be safely deployed for wireless authentication inside EAP tunnel methods.
EAP-MS-CHAP features include Mutual Authentication and Password-based Authentication.
• EAP-SIM: Capable of operating in wireless networks. EAP-SIM is used for authentication and
session key distribution using the GSM SIM.
• EAP-AKA: Based on the challenge-response mechanism and symmetric cryptography. An
authentication and session key distribution mechanism used in the third generation mobile
networks: UMTS and CDMA2000.
426 Supported Authentication Methods