Editing Extensible Authentication Protocol (section)

===EAP Encrypted Key Exchange (EAP-EKE)===
EAP with the [[encrypted key exchange]], or EAP-EKE, is one of the few EAP methods that provide secure mutual authentication using short passwords and no need for [[public key certificate]]s. It is a three-round exchange, based on the [[Diffie–Hellman key exchange|Diffie-Hellman]] variant of the well-known EKE protocol.

EAP-EKE is specified in {{IETF RFC|6124}}.