What to authenticate with.
Its password.
The account to log in as.
Unpredictable bytes, never reused. The core has no entropy source, so the host supplies this, and reusing one destroys the replay protection the mechanism exists for.
What to authenticate with.