A password-based authentication protocol that uses a challenge to verify that a user has access rights to a system.
A hash of the supplied password with the challenge is sent for comparison so the cleartext password is never sent over the connection.
Context Categories:
Data Security