5.5 Security Considerations

All seed-related operations require an active Secure Channel. PIN verification may be enforced depending on configuration. Dual generation ensures no single card has complete seed information during exchange.

Using the PUK only resets the card—it does not restore seeds.