Microsoft RAS encryption?

Mike Michael.Johnson at
Mon Aug 4 00:12:21 PDT 1997

sameer wrote:
>	See
>> Does anybody know how Microsoft RAS implements data encryption? Apparently
>> ( they use RC4, but is
>> this stuff documented somewhere, like in an RFC?

What I can find at only deals with password authentication.
I'm more interested in the RC4 data encryption that Microsoft RAS servers
and clients are using. That is, once a PPP session is established and
MSCHAP is used to authenticate the session, the secret from MSCHAP is
reused as two RC4 keys with 40 or 128 bit keys (US or International
versions). But I can't find any documents on exactly how this works.


More information about the cypherpunks-legacy mailing list