MS-CHAPv2 in FreeRADIUS

[Alan DeKok]

On Jul 29, 2018, at 4:11 AM, Grit Wehner <grit.wehner at gmx.net> wrote:
> 
>   Does FreeRADIUS decrypt the "client-nt-response" (encrypted challenge)
>   and compares the result
>   with its own calculated challenge?

  No.  The hashes are one-way.  They can be can be calculated, they can't (generally) be "decrypted" to get the original data,

> Or does it calculate its own
>   "server-nt-response" and compares
>   this to the received "client-na-response"?

  Yes.

  Alan DeKok.