Authentication protocol: Difference between revisions

Revision as of 22:30, 24 July 2023

Latest revision as of 23:19, 10 July 2024

(5 intermediate revisions by 4 users not shown)

Line 27:

====CHAP - [[Challenge-handshake authentication protocol]]====

The authentication process in this protocol is always initializedinitiated by the server/host and can be performed anytime during the session, even repeatedly. ServerThe server sends a random string (usually 128B long). The client uses the password and the string received as parametersinput forto MD5a hash function and then sends the result together with username in plain text. ServerThe server uses the username to apply the same function and compares the calculated and received hash. An authentication is successful orwhen the calculated and received hashes unsuccessfulmatch.

====[[Extensible Authentication Protocol|EAP - Extensible Authentication Protocol]]====

EAP was originally developed for PPP(Point-to-Point Protocol) but today is widely used in [[IEEE 802.3]], [[IEEE 802.11]](WiFi) or [[IEEE 802.16]] as a part of [[IEEE 802.1x]] authentication framework. The latest version is standardized in RFC 5247. The advantage of EAP is that it is only a general authentication framework for client-server authentication - the specific way of authentication is defined in its many versions called EAP-methods. More than 40 EAP-methods exist, the most common are:

Line 48:

[[Remote Authentication Dial-In User Service]] (RADIUS) is a full [[AAA (computer security)|AAA protocol

]] commonly used by [[ISP]]s. Credentials are mostly username-password combination based, and it uses [[Network access server|NAS]] and [[User Datagram Protocol|UDP]] protocol for transport.<ref>{{cite web|url = http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-1/user/guide/acsuserguide/rad_tac_phase.html|title = AAA protocols|access-date = 31 October 2015|website = www.cisco.com|publisher = CISCO}}</ref>

====[[DIAMETER]]====

[[Diameter (protocol)]] evolved from RADIUS and involves many improvements such as usage of more reliable TCP or [[SCTP]] transport protocol and higher security thanks to [[Transport Layer Security|TLS]].<ref>{{cite web|url = http://www.ibm.com/developerworks/wireless/library/wi-diameter/|title = Introduction to Diameter|date = 24 January 2006|access-date = 31 October 2015|website = www.ibm.com|publisher = IBM|last = Liu|first = Jeffrey}}</ref>

===Other===