Every confidential cryptographic key, preinstalled or produced by the equipment in use, offers at least 112 bits of security strength. A key serving one security mechanism alone may fall short where that shortfall is identified and argued for under the ACM, AUM, SCM, SUM or SSM clauses. The term reaches only keys whose disclosure could be turned to fraud, so secrets that merely guard intellectual property, and whose disclosure could not be turned to fraud, fall outside it; it covers keys the manufacturer chooses directly and keys imposed by the protocols it selects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.