Microsoft Point-to-Point Encryption

From Wikipedia, the free encyclopedia

Microsoft Point-to-Point Encryption (MPPE) is a protocol for encrypting data across Point-to-Point Protocol (PPP) and virtual private network (VPN) links. It uses the RSA RC4 encryption algorithm. MPPE supports 40-bit, 56-bit and 128-bit session keys, which are changed frequently to improve security. The exact frequency that the keys are changed is negotiated, but may be as frequent as every packet.

MPPE alone does not compress or expand data, but the protocol is often used in conjunction with Microsoft Point-to-Point Compression which compresses data across PPP or VPN links.

Negotiation of MPPE happens within the Compression Control Protocol (CCP), a subprotocol of PPP. This can lead to incorrect belief that it is a compression protocol.

External links

RFC 3078 (the protocol), RFC 3079 (deriving initial session keys)
MPPE, Microsoft Point-To-Point Encryption Protocol

v t e Virtual private networking

Communications protocol	SSTP IPsec L2TP L2TPv3 PPTP Split tunneling SSL/TLS (Opportunistic : tcpcrypt)

Free software	n2n Openswan OpenVPN Social VPN strongSwan tcpcrypt tinc Cloudvpn VTun Libreswan

Vendor-driven protocols	Layer 2 Forwarding Protocol DirectAccess

Proprietary software	Check Point VPN-1 Cisco Systems VPN Client Gbridge Hamachi Microsoft Forefront Unified Access Gateway Wippien

Risk Vectors	Content-control software Deep content inspection Deep packet inspection IP address blocking Network enumeration Stateful firewall TCP Reset VPN blocking

This article is issued from Wikipedia. The text is available under the Creative Commons Attribution/Share Alike; additional terms may apply for the media files.