EAP-PSK-256 — Quantum-Resistant EAP Authentication Method (IETF Draft)

Co-authored an Internet-Draft submitted to the IETF proposing EAP-PSK-256, a lightweight authentication protocol for mutual authentication and secret-key establishment based on a pre-shared secret.

Key contributions of the draft

• Quantum resistance through AES-256 in place of AES-128
• Key derivation aligned with the NIST SP 800-108 standard
• Increased entropy by combining randomness from both the peer and the server, rather than the peer alone

Co-authored with Bruno Rohee (SIGINFO), Michael Le Clerc (Enedis), and Clément Devun (Enedis).