Assurance

[Tom Scavo <>]

> as long as we take care to indicate documents such as 800-63 as the
> gospel. 800-63 is for the feds, not for the rest of us. there exists
> useful guidance within these docs but appropriate care should be taken
> to not use them as "the" way to do things.

Is there a way to understand the min-entropy requirement without referring to 
800-63? (I hope the answer is yes.)

Tom