response
     A string of 32 hex digits computed as defined below, which proves
     that the user knows a password