Editing Extensible Authentication Protocol (section)

===PEAP===
{{Main|Protected Extensible Authentication Protocol}}

The [[Protected Extensible Authentication Protocol]], also known as Protected EAP or simply PEAP, is a protocol that encapsulates EAP within a potentially encrypted and authenticated [[Transport Layer Security]] (TLS) [[tunneling protocol|tunnel]].<ref>{{cite IETF|draft=draft-kamath-pppext-peapv0-00|title=Microsoft's PEAP version 0 (Implementation in Windows XP SP1)|section=1.1|sectionname=EAP encapsulation}}</ref><ref name="peapv2-10_abstract">{{Cite IETF|title=Protected EAP Protocol (PEAP) Version 2|draft=draft-josefsson-pppext-eap-tls-eap-10|section=Abstract|nosec=yes}}</ref><ref>{{cite IETF|title=Protected EAP Protocol (PEAP) Version 2|draft=draft-josefsson-pppext-eap-tls-eap-10|section=1|sectionname=Introduction}}</ref> The purpose was to correct deficiencies in EAP; EAP assumed a protected communication channel, such as that provided by physical security, so facilities for protection of the EAP conversation were not provided.<ref>{{cite IETF|title=Protected EAP Protocol (PEAP) Version 2|draft=draft-josefsson-pppext-eap-tls-eap-07|section=1|sectionname=Introduction}}</ref>

PEAP was jointly developed by Cisco Systems, Microsoft, and RSA Security. PEAPv0 was the version included with [[Microsoft]] [[Windows XP]] and was nominally defined in [http://tools.ietf.org/html/draft-kamath-pppext-peapv0-00 draft-kamath-pppext-peapv0-00]. PEAPv1 and PEAPv2 were defined in different versions of ''draft-josefsson-pppext-eap-tls-eap''. PEAPv1 was defined in [http://tools.ietf.org/html/draft-josefsson-pppext-eap-tls-eap-00 draft-josefsson-pppext-eap-tls-eap-00] through [http://tools.ietf.org/html/draft-josefsson-pppext-eap-tls-eap-05 draft-josefsson-pppext-eap-tls-eap-05],<ref>{{cite IETF|title=Protected EAP Protocol (PEAP)|draft=draft-josefsson-pppext-eap-tls-eap-05|section=2.3}}</ref> and PEAPv2 was defined in versions beginning with [http://tools.ietf.org/html/draft-josefsson-pppext-eap-tls-eap-06 draft-josefsson-pppext-eap-tls-eap-06].<ref>{{cite IETF|title=Protected EAP Protocol (PEAP)|draft=draft-josefsson-pppext-eap-tls-eap-06|section=2.3|sectionname=Version negotiation}}</ref>

The protocol only specifies chaining multiple EAP mechanisms and not any specific method.<ref name="peapv2-10_abstract"/><ref>{{cite IETF|title=Protected EAP Protocol (PEAP) Version 2|draft=draft-josefsson-pppext-eap-tls-eap-10|page=11|sectionname=Protocol Overview}}</ref> Use of the [[EAP-MSCHAPv2]] and [[EAP-GTC]] methods are the most commonly supported.{{Citation needed|date=April 2010}}