Editing Extensible Authentication Protocol (section)

===EAP-MD5===
EAP-MD5 was the only IETF Standards Track based EAP method when it was first defined in the original RFC for EAP, {{IETF RFC|2284}}. It offers minimal security; the [[MD5]] [[hash function]] is vulnerable to [[dictionary attack]]s, and does not support key generation, which makes it unsuitable for use with dynamic WEP, or WPA/WPA2 enterprise. EAP-MD5 differs from other EAP methods in that it only provides authentication of the EAP peer to the EAP server but not mutual authentication. By not providing EAP server authentication, this EAP method is vulnerable to man-in-the-middle attacks.<ref>{{cite web|title = Alternative Encryption Schemes: Targeting the weaknesses in static WEP|url=https://arstechnica.com/articles/paedia/security.ars/4|website = Ars Technica | access-date = 2008-02-17}}</ref> EAP-MD5 support was first included in [[Windows 2000]] and deprecated in [[Windows Vista]].<ref>{{citation | chapter-url = http://support.microsoft.com/kb/922574 | publisher = Microsoft | title = Knowledge Base | chapter = 922574}}</ref>