EAP-TLS Peer                                      EAP-TLS Server

                                                      EAP-Request/
                             <--------                   Identity
 EAP-Response/
 Identity (Privacy-Friendly) -------->
                                                      EAP-Request/
                                                 EAP-Type=EAP-TLS
                             <--------                 (TLS Start)
 EAP-Response/
 EAP-Type=EAP-TLS
(TLS ClientHello
 + pre_shared_key)           -------->
                                                      EAP-Request/
                                                 EAP-Type=EAP-TLS
                                                 (TLS ServerHello,
                                          TLS EncryptedExtensions,
                             <--------               TLS Finished,
                                             TLS NewSessionTicket)
 EAP-Response/
 EAP-Type=EAP-TLS
(TLS Finished)               -------->
                                                      EAP-Request/
                                                 EAP-Type=EAP-TLS
                             <-------- (TLS Application Data 0x00)
 EAP-Response/
 EAP-Type=EAP-TLS            -------->
                             <--------                EAP-Success