which mechanism is used by the client to authenticate the AAA server in Phase One?

When a supplicant and AAA server are configured to use PEAP, which mechanism is used by the
client to authenticate the AAA server in Phase One?

A.
PMK

B.
shared secret keys