must must Indicates a requirement of this recommendation that might not be testable by a CMVP testing lab. 📚 Reference: NIST SP 800-227 🏷️ Category: Cybersecurity 📊 Commonality: common