
276 ◾ C.J. Wiemer
If the server’s decrypted blocks match the original challenge that it sent
the client, the authentication completes and sends a “success” packet back
to the client.
Disadvantages and weaknesses for CHAP are
• Very weak and easy to crack.
• Hashed passwords are sent over the network, leaving them vulner-
able to network sniers.
• Does not limit the number of password retries allowed, making
brute- force password guessing easier.
• One- way authentication (client is only one being authenticated).
MS- CHAPv2 solves the above disadvantages and weaknesses by pro-
viding two- way authentication, or mutual authentication. e protocol ...