Click here

CHAP

Short for Challenge Handshake Authentication Protocol, a type of authentication in which the authentication agent (typically a network server) sends the client program a random value that is used only once and an ID value. Both the sender and peer share a predefined secret. The peer concatenates the random value (or nonce), the ID and the secret and calculates a one-way hash using MD5. The hash value is sent to the authenticator, which in turn builds that same string on its side, calculates the MD5 sum itself and compares the result with the value received from the peer. If the values match, the peer is authenticated.

By transmitting only the hash, the secret can't be reverse-engineered. The ID value is increased with each CHAP dialogue to protect against replay attacks.

Contrast with PAP.

CHAP


Top Terms
  • 1

    Consumerization of IT

    Consumerization of IT is a phrase used to describe the cycle of information technology (IT) emerging in the consumer market then spreading to...

    Read more »

  • 2

    ERP - Enterprise Resource Planning

    Short for enterprise resource planning, ERP is business management software that allows an organization to use a system of integrated applications...

    Read more »

  • Click Here!

Connect with Webopedia

Did You Know? Archive »

  • Quick Reference Archive »