Yubikey:


Server-provided Pepper:

hmac_sha1 of password with pepper as key: