Method State Machine

A method state machine is an implementation of a particular EAP method. A method state machine is created by a switch state machine when the authentication policy indicates that there is an EAP authentication method that needs to be performed before an EAP authentication result is obtained. Method state machines are implemented in class EapMethodStateMachine from which a distinct class is derived for handling each EAP method.

When an EAP method is capable of deriving a key, the key is set to keyData variable. A zero-sized keyData means that the key is not available, otherwise the key is available. The keyData size must be set to zero when (re)starting the EAP method. The key data must not be available until the method completes successfully.

The following methods are defined in the library by default.

• Identity (implemented in EapPeerIdentityStateMachine and EapAuthIdentityStateMachine classes)
• Notification (implemented in EapPeerNotificationStateMachine and EapAuthNotificationStateMachine classes)
• MD5-Challenge (implemented in EapPeerMD5ChallengeStateMachine and EapAuthMD5ChallengeStateMachine classes)

Note that Nak is implemented in switch state machines.

---