Hi!
Please refer to the differences below:
1. the CHAP adopts the three-way handshake whereas the PAP adopts the two-way handshake;
2. the CHAP is initiated by the authenticator whereas the PAP is initiated by the authenticated party;
3. the CHAP carries the user name and hash. The PAP carries the user name and password in plaintext;
4. the CHAP authentication user name is optional, but the PAP authentication user name is not (that is to say, the password does not need to be configured on the interface of the authenticated party).