...
So some question of whether the challenge itself or the session key is actually an "authentication secret".
\[In 800-63\] On On the order of 2^80 if it's possible to guess/attack it. Talked Talked about larger entropy of passwords for Silver 2^42 (12 char rather than 8, etc). Wiki Markup
Client Caching Credentials
...