Cheaper MS-CHAPv2 Cracking

Re:Cheaper MS-CHAPv2 Cracking by trotsky on Monday September 24, 2012 @05:25PM (#4567078)

I missed this the first time around, is there a paper in addition to the blog post? I am wondering if I misunderstand common implementations of PWA 2 enterprise. I was under the impression that mschapv2 was only used inside the server (or mutual) authenticated tls with schemes like peap. Does the chap response actually travel in the clear after tls is used to authenticate the AAA box?

[ Parent | on HN ]

Re:Cheaper MS-CHAPv2 Cracking by marshray on Monday September 24, 2012 @06:10PM (#4567288)

It's sent in the clear in PPTP and RADIUS. I haven't looked at WPA2 personally, but my understanding is that it is in deployments without properly-authenticated certificates.

[ Parent | on HN ]

Re:Cheaper MS-CHAPv2 Cracking by yuhong on Tuesday September 25, 2012 @03:25AM (#4569099)

Yea, the best solution would be a MS-CHAPv3 with the fix from NTLMv2, but...

[ Parent | on HN ]