W3C WebAuthn L3: §13.4.3 challenge requirements (minimum entropy/length).
Parsers and constructors enforcing minimum challenge length requirements.