CHAP is an authentication scheme used by Point-to-Point Protocol (PPP) servers to validate the identity of remote clients. CHAP periodically verifies the identity of the client by using a three-way handshake method. The challenge data contains the server’s name. The client must respond with its name with a new value derived from the challenge information, and the stored authentication information. For CHAP, this information is stored in the /etc/ppp/chap-secrets file.
CHAP provides protection against playback attack by the peer through the use of an incrementally changing identifier and a variable challenge-value. CHAP requires that both the client and server know the plaintext of the secret, although it is never sent over the network.
Copyright © 2009-2010 Wikipedia. All rights reserved.
If you like this article, please leave a comment or subscribe this blog via RSS or via e-mail, Bookmark and share through your network. Click the AddThis button below. Thanks.