Protocols used in computer networking to verify the identify of devices and users.
Types
Kerberos: Key Distribution Centre (KDC) based authentication protocol that uses tickets in domain environments.SRP: Password-based authentication protocol that uses cryptography to protect against eavesdropping and man-in-the-middle attacks.- SSL: Cryptographic protocol used for secure communication over a computer network.
TLS: Cryptographic protocol that provides communication security over the internet. It is the successor to SSL.OAuth: Open standard for authorisation that allows users to grant third-party access to their web resources without sharing passwords.OpenID: Decentralised authentication protocol that allows users to sign in to multiple websites using a single identity.SAML: Security Assertion Markup Language, an XML-based standard for securely exchanging authentication and authorisation data between parties.2FA: Authentication method that uses a combination of two different factors to verify a user’s identity.FIDO: The Fast Identity Online Alliance is a consortium of companies working to develop strong authentication standards based on public and private keys.PKI: System for securely exchanging information using public and private keys for encryption and digital signatures.SSO: Authentication method that allows a user to use a single set of credentials to access multiple applications.MFA: Authentication method that uses multiple factors (something the user knows, has, or is) to verify their identity.PAP: Simple authentication protocol that sends a user’s password in clear text over the network to verify their identity.CHAP: Authentication protocol that uses three-way handshake to verify a user’s identity, supporting remote access and SSH.EAP: Framework for supporting multiple authentication methods, allowing for the use of various technologies to verify a user’s identity.SSH: Secure version of the TCP protocol used for communication over the internet. HTTPS uses SSL/TLS to encrypt communication and provide authentication, ensuring third parties cannot intercept or read transmitted data, particularly for web browsing.LEAP: Wireless authentication protocol developed by Cisco. It provides mutual authentication between a wireless client and server and uses RSA encryption. Unfortunately, LEAP is vulnerable to dictionary attacks and has been largely replaced by more secure protocols such as EAP-TLS and PEAP.PEAP: PEAP is a secure tunneling protocol used for wireless and wired networks. It is based on EAP and uses TLS to encrypt communication between a client and server. PEAP can also be used to authenticate the client using various methods, such as passwords or server-side certificates, and is widely used in enterprise networks for secure authentication.