[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: MS-CHAPv2 in FreeRADIUS
From:       Alan DeKok <aland () deployingradius ! com>
Date:       2018-07-29 13:14:29
Message-ID: F5B817D8-A7E0-4378-AA39-DB43653C8CA7 () deployingradius ! com
[Download RAW message or body]

On Jul 29, 2018, at 4:11 AM, Grit Wehner <grit.wehner@gmx.net> wrote:
> 
> Does FreeRADIUS decrypt the "client-nt-response" (encrypted challenge)
> and compares the result
> with its own calculated challenge?

  No.  The hashes are one-way.  They can be can be calculated, they can't (generally) \
be "decrypted" to get the original data,

> Or does it calculate its own
> "server-nt-response" and compares
> this to the received "client-na-response"?

  Yes.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]