client when one-time passwords are in use?

Which protocol does the RADIUS server use inside the secure tunnel of EAP-FAST to authenticate the
client when one-time passwords are in use?

A.
GTC

B.
MD5

C.
MS-CHAP v2

D.
PAP