Forum

This might be a bit confusing semantically. EAP is a protocol, and the protocol specifies how the MSK will be created during authentication. The supplicant and AS support a specific EAP type and they authenticate one another within the framework of that EAP implementation. In that sense, the EAP type specifies how the keys will be derived, but it is not an entity (it is a protocol); thus, it does not, independent of the supplicant and AS, derive the keys and export them to the supplicant and AS.