CHAP vs. PAP

1
CHAP
learntorise
CHALLENGE HANDSHAKE AUTHENTICATION PROTOCOL
PAP
PASSWORD AUTHENTICATION PROTOCOL
www.infosectrain.com
2
Authentication Mechanism
learntorise
CHAP
PAP
Mutual authentication process, both the client
and the server authenticate each other's
identities
One-way authentication process, only the
client authenticates with the server
www.infosectrain.com
3
Password Transmission
learntorise
CHAP
PAP
Sends the encrypted password
Sends the password in plain text
www.infosectrain.com
4
Security
learntorise
CHAP
PAP
More secure due to the password not being sent
directly and uses a challenge-response
mechanism
Less secure due to plain text password
transmission and easily interceptable
www.infosectrain.com
5
Frequency
learntorise
CHAP
PAP
Periodic (frequent re-authentication)
Authentication typically occurs only during the
initial connection setup
www.infosectrain.com
6
Complexity
learntorise
CHAP
PAP
More complex and sophisticated to implement
Simpler to implement
www.infosectrain.com
7
Vulnerabilities
learntorise
CHAP
PAP
Resistant to eavesdropping and replay attacks
Vulnerable to eavesdropping and replay attacks
www.infosectrain.com
8
Use Cases
learntorise
CHAP
PAP
Suitable for long-lasting connections
Suitable for low-security scenarios
www.infosectrain.com
9
FOUND THIS USEFUL?
To Get More Insights Through Our FREE
Courses Workshops eBooks ChecklisEs Mock
TesEs
LIKE
FOLLOW
SHARE