The information system, for password-based authentication, stores only cryptographically-protected passwords.