CHAP (Challenge-Handshake Authentication Protocol)-a tech explanation

Tekmart Infrastructure SecurityTeam/ April 26, 2021/ Datacenter Infrastructure News, Engage the experts, Enterprise identity and access management, Expert Advise and Opinion, Identity and access management, Tech Definitions, Technical Explanations, Web authentication and access control

Reading Time-approximately: < 1 minute

CHAP (Challenge-Handshake Authentication Protocol) is a more secure procedure for connecting to a system than the Password Authentication Procedure (PAP).

Courtesy Post:

By TechTarget Contributor

Here’s how CHAP works:-

1. After the link is made, the server sends a challenge message to the connection requestor. The requestor responds with a value obtained by using a one-way hash function.
2. The server checks the response by comparing it its own calculation of the expected hash value.
3. If the values match, the authentication is acknowledged; otherwise theconnection is usually terminated.

At any time, the server can request the connected party to send a new challenge message. Because CHAP identifiers are changed frequently and because authentication can be requested by the server at any time, CHAP provides more security than PAP. RFC1334 defines both CHAP and PAP.