Multiple choice technology architecture

To ensure data integrity, which of the following does CHAP send across the PPP link to authenticate the remote client ?

  1. Plaintext password

  2. One-way hash value

  3. Digital signature

  4. Asymmetric encryption key

Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

CHAP (Challenge Handshake Authentication Protocol) uses a one-way hash function to authenticate the remote client without sending the actual password across the link. The server sends a random challenge, the client computes a hash of the challenge combined with their password using a one-way algorithm like MD5, and sends back the hash value. The server performs the same calculation and compares results. This prevents plaintext password transmission and protects against replay attacks since each challenge is unique. Digital signatures require asymmetric encryption which CHAP does not use.