2.7.6 TODOΒΆ

Verify that the initial authentication code is generated by a secure random number generator, containing at least 20 bits of entropy (typically a six digital random number is sufficient).

Level 1  
Level 2 X
Level 3 X
CWE NIST
310 5.1.3.2