-uses ‘start’, ‘reply’, and ‘continue’ packets

-authentication results in ‘success’, ‘failure, or ‘error’