2.28 Authentication success or failure should take equal timeΒΆ

Verify that all authentication challenges, whether successful or failed, should respond in the same average response time.

Levels: 3