https://blog.oppedahl.com/picking-authentication-mechanism-epct/
Picking an authentication mechanism for ePCT