How does MSK is transmitted in pre-authentication phase in 802.1x authentication?

The image is taken from https://mrncciew.com/2014/08/19/cwsp-4-way-handshake/ . How does it transmit the keys without session establishment in untrusted medium. Is it that after EAP is successful, authenticator sends the MSK to supplicant transparently that it received from authentication server? https://preview.redd.it/cvvxtegmk7td1.png?width=1080&format=png&auto=webp&s=85c46c2208e289eab7d7e3f96d6d8ac6252373f5 Also I have follow up question, based on the following diagram, how MSK is derived for WPA-PSK (Personal authentication) environment? https://preview.redd.it/ewzlk9a8l7td1.png?width=643&format=png&auto=webp&s=705af6dab05e6dc1e36de4803fd0622141b9020a submitted by /u/tbhaxor [link] [comments]

from hacking: security in practice https://ift.tt/pNoTSdr