Keys, components and shares are generated inside an SCD by an approved key-generation function, either of a PCI-approved POI or HSM, of an HSM holding FIPS 140-2 or 140-3 certification at Level 3 or above, or of an SCD whose random number generator has been independently certified against NIST SP 800-22, so that every key is equally probable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.