The client and server both compute

P16 = MD4(U(PN))
and
P24 = E(P21, C8)

where:

• PN is a string containing the user’s password in clear text, case sensitive, no maximum length
• U(x) of an ASCII string "x" is that string converted to Unicode
• MD4(x) of an octet string "x" is the 16 byte MD4 message digest [6] of that string
• P21 and C8 are as above.