PEAP sending username in the clear

[rsumpter]

It was my understanding the PEAP created an SSL tunnel for transmitting ALL of the user credentials. When I capture a PEAP authentication with my sniffer the user ID is passed in the clear. Is this normal or do I have something configured wrong?

[scottmac]

I believe what you are seeing is normal. According to some Cisco stuff I read (it's been a while), Open auth is preferred, because using shared / encrypted info may provide an attacker with useful information (predictable information exchange).

Once the intial auth is granted, eveything is encrypted with dynamic keys or tunneled and is secure.

FWIW

Scott

[ingservis]

From being present on Cisco web site and designing a few wireless networks I have stumbled on this info somewhere in docs.... what you are seeing is a part of a secure channel process creation ...and you are seeing Microsoft side of it, cause issue with Win platform is that on channel creation it sends login/username in clear text douring EAP...secure channel creation process...

...I also remember that there is a reason for it, for interoperability with something, but can not remember specifics...

I think this answers your question... I believe it is normal..

Regards