Page History

...

So some question of whether the challenge itself or the session key is actually an "authentication secret".

Wiki Markup\[In 800-63\] On  On the order of 2^80 if it's possible to guess/attack it. Talked  Talked about larger entropy of passwords for Silver 2^42 (12 char rather than 8, etc).

Client Caching Credentials

...