MS-CHAP - Security Vulnerabilities and Cryptanalysis

Security Vulnerabilities and Cryptanalysis

Several weaknesses have been found in MS-CHAPv2, some of which severely reduce the complexity of brute-force attacks making them feasible with modern hardware.

  • Cryptanalysis of Microsoft's PPTP Authentication Extensions (MS-CHAPv2), co-written by Bruce Schneier
  • Exploiting known security holes in Microsoft's PPTP Authentication Extensions (MS-CHAPv2), by Jochen Eisinger

In 2012 the complexity of breaking MS-CHAPv2 was reduced to that of breaking a single DES key:

  • Divide and Conquer: Cracking MS-CHAPv2 with a 100% success rate by Moxie Marlinspike.

Read more about this topic:  MS-CHAP

Famous quotes containing the word security:

    In the long course of history, having people who understand your thought is much greater security than another submarine.
    J. William Fulbright (b. 1905)