Practical key-recovery attack against APOP, an MD5-based challenge-response authentication