@maxleibman Please re-read NIST 800-63B.