CHAP (Challenge-Handshake Authentication Protocol)
CHAP (Challenge-Handshake Authentication Protocol) is a more secure procedure for connecting to a system than the Password Authentication Procedure (PAP). Here's how CHAP works:
- After the link is made, the server sends a challenge message to the connection requestor. The requestor responds with a value obtained by using a one-way hash function.
- The server checks the response by comparing it its own calculation of the expected hash value.
- If the values match, the authentication is acknowledged; otherwise theconnection is usually terminated.
At any time, the server can request the connected party to send a new challenge message. Because CHAP identifiers are changed frequently and because authentication can be requested by the server at any time, CHAP provides more security than PAP. RFC1334 defines both CHAP and PAP.
Contributor(s): Nico Macdonald
This was last updated in August 2000
Dig Deeper
-
SaaS CRM helps a national broker/dealer woo financial advisers away from competitors by creating a single-sign on experience.
-
Learn how collaboration tools can increase employee productivity and overall business efficiency, and how the business can benefit from collaboration tool implementations.
-
Putting beta software into production is a risk many organizations won't take -- but for those that do, the benefits can be great. Here's how to balance the risks and rewards.
-
People who read this also read...