EN 18031-2:2024 CCK-2: Generate confidential cryptographic keys with best-practice cryptography

What does CCK-2 require?

Confidential cryptographic keys are generated using best-practice cryptography, with the same allowance for an argued shortfall on keys serving one specific mechanism under the ACM, AUM, SCM, SUM or SSM clauses.