EAP-FIDO: A novel EAP method for using FIDO2 credentials for network authentication

Rivera-Dourado, Martiño; Xenakis, Christos; Pazos, A.; Vázquez-Naya, José

Use this link to cite:

http://hdl.handle.net/2183/42084

EAP-FIDO: A novel EAP method for using FIDO2 credentials for network authentication

Files

RiveraDourado_Martiño_2025_EAP-FIDO.pdf (3.38 MB)

Identifiers

URI: http://hdl.handle.net/2183/42084

Publication date

2025-05-10

Authors

Rivera-Dourado, Martiño

Xenakis, Christos

Pazos, A.

Vázquez-Naya, José

Bibliographic citation

M. Rivera-Dourado, C. Xenakis, A. Pazos, y J. Vázquez-Naya, «EAP-FIDO: A novel EAP method for using FIDO2 credentials for network authentication», Computer Networks, vol. 266, p. 111348, jul. 2025, doi: 10.1016/j.comnet.2025.111348

Abstract

[Abstract]: The adoption of FIDO2 authentication by major tech companies in web applications has grown significantly in recent years. However, we argue FIDO2 has broader potential applications. In this paper, we introduce EAP-FIDO, a novel Extensible Authentication Protocol (EAP) method for use in IEEE 802.1X-protected networks. This allows organisations with WPA2/3-Enterprise wireless networks or MACSec-enabled wired networks to leverage FIDO2’s passwordless authentication in compliance with existing standards. Additionally, we provide a comprehensive security and performance analysis to support the feasibility of this approach