Requirement
Implement replay-resistant authentication mechanisms for access to privileged and non-privileged accounts.
Explanation
Authentication processes resist replay attacks if it is impractical to successfully authenticate by recording or replaying previous authentication messages. Replay- resistant techniques include protocols that use nonces or challenges, such as time synchronous or challenge-response one-time authenticators.
