
|
Session Key Binding Inner Secret is initialized to master secret at conclusion of TLS handshake. Inner Secret is permuted in each phase All inner session keys developed during phase are concatenated into a vector in order of value PRF is applied to label, randoms, and session key vector, using current Inner Secret as key 48-octet result is new Inner Secret Inner Secret is confirmed by PhaseFinished message. Final Inner Secret from last phase is exported. EAP-TTLS v1 derives MSK (i.e. MPPE keys) from Inner Secret. |