Question

Microsoft has developed two enhanced versions of CHAP, MS-CHAP version 1 and MS-CHAP version 2. Compare and contrast CHAP, MS-CHAP v1, and MS-CHAP v2.

Answer 1

Hey,

Note: Brother in case of any queries, just comment in box I would be very happy to assist all your queries

Basically MS-CHAP v2 is more secure, it provides mutual authentication, stronger initial data encryption keys, and different encryption keys for sending and receiving.
MS-CHAP v2, the cryptographic key is always based on the user's password and a random challenge string. Each time it authenticates, a new string is used.
MS-CHAP v1 was mainly used in windows 2000 and only provided 1-way authentication, VISTA doesn't support it, as v2 is much more secure. It uses a 40-bit encryption key based on the user's password.
You may need to use v1 for backwards compatibility with NT and but there aren't very many companies running NT anymore.

So with MS-CHAP v1, only the Server requires authentication from the client, where as MS-CHAP v2, the client requires authentication from the Server and vice versa

Kindly revert for any queries

Thanks.