@misc{rfc5931, series = {Request for Comments}, number = 5931, howpublished = {RFC 5931}, publisher = {RFC Editor}, doi = {10.17487/RFC5931}, url = {https://www.rfc-editor.org/info/rfc5931}, author = {Glen Zorn and Dan Harkins}, title = {{Extensible Authentication Protocol (EAP) Authentication Using Only a Password}}, pagetotal = 40, year = 2010, month = aug, abstract = {This memo describes an Extensible Authentication Protocol (EAP) method, EAP-pwd, which uses a shared password for authentication. The password may be a low-entropy one and may be drawn from some set of possible passwords, like a dictionary, which is available to an attacker. The underlying key exchange is resistant to active attack, passive attack, and dictionary attack. This document is not an Internet Standards Track specification; it is published for informational purposes.}, }