Authentication where the server sends a random challenge and the client proves identity by responding correctly, typically with a cryptographic signature.