Password Authentication Protocol: Difference between revisions

Revision as of 05:54, 19 June 2022

Revision as of 19:35, 5 November 2022

Line 11:

==Benefits of PAP==

When the client sends a clear-text password, the authentication server will receive it, and compare it to a "known good" password. Since the authentication server has received the password in clear-text, the [[Password#Form_of_stored_passwordsForm of stored passwords|format of the stored password]] can be chosen to be secure "at rest". If an attacker were to steal the entire database of passwords, it is computationally infeasible to reverse the function to recover a plaintext password.

As a result, while PAP passwords are less secure when sent over a PPP link, they allow for more secure storage "at rest" than with other methods such as [[Challenge-handshake authentication protocol|CHAP]].

==Working cycle==

PAP authentication is only done at the time of the initial link establishment, and verifies the identity of the client using a [[handshakingHandshake (computing)|two-way handshake]].

#Client sends username and password. This is sent repeatedly until a response is received from the server.

Line 86:

[[Category:Internet protocols]]

[[Category:Authentication protocols]]

{{Compu-network-stub}}