Attention:
The information presented on this page is out-of-date. In order to get the most actual info on StarWind products, please visit the
following page.
The content here seems to be out-of-date. To get the latest info, please visit the following page
CHAP Authentication
CHAP (Challenge Handshake Authentication Protocol) is an authentication protocol used to authenticate clients connecting to the server. Passwords are hashed so that during the authentication process user passwords are not uses directly, just the hash codes (usually computed using the hash function MD5).The hash function uses as an input parameter a parameter that is stored on the server and client, as well as a unique query string generated by the server during the authentication process, and gives a hexadecimal sequence preventing reverse encryption. The server and client make the same calculations and compare their results. Thus, the clear text password is not transmitted over the network, eliminating the possibility of its interception by sniffers. Because the query string is unique for each server authentication session the probability of a replay-attack using the CHAP-package from the previous authentication session for spoofing is eliminated.
StarWind iSCSI SAN fully implements CHAP Authentication.
