Authentication With CHAP

• Protocol is 0xC223

• Messages: Challenge, Response, Success, Failure

• • Success and Failure messages can include optional text

• Initiated by authenticator, not authenticatee

• Password never appears on the wire, but must be stored in plaintext at both ends

• Hash function determined during LCP phase