I'd describe a challenge-based authentication system that uses 128-bit AES as "An industry standards-based solution that would have worked"

In other words, the superlatives don't match the reality.