802.1x, EAP-TLS -PEAP

Jouni Malinen j
Wed Jun 17 10:49:25 PDT 2009

On Wed, Jun 17, 2009 at 12:09:54PM +0530, Harsha gowda wrote:

> I want to decrypt the WPA2 data flowing between supplicant and AccessPoint,
> For this i need the DERIVE PMK,
> So far i have derived *Master-secret* and *Key_block* for TLS, & *Tunnel Key
> * for PEAP
> Which key would lead me to Parwise Master Key(*PMK*),

If you are not using PEAP with cryptobinding, the key you called "TK" is
actually MSK and the first 32 octets of it will be used as PMK.

Jouni Malinen                                            PGP id EFC895FA

More information about the Hostap mailing list