WUG-8.2.1-Sec-02 — Private keys bound to WSCA/WSCD, never leave

ARF ISSU_36 Private keys bound to WSCA/WSCD, never leave.

Property	Value
Section	8.2.1 General
Owner	platform

Mapped Controls

Control	Title
SID-CRYPTO-02	PRF Extension Key Derivation
SID-CRYPTO-03	AES-256-GCM Encrypted Keystore
SID-KEY-01	WSCA WebSocket Key Signing Delegation
SID-KEY-03	WSCD Client Library with rawSign API