Optimal capacity region for PUF-based authentication with a constraint on the number of challenge-response pairs.