The NIT has issued a technical decision for Challenge-Response for Authentication

While a challenge-response based authentication could provide a sufficient level of security in general, NDcPP currently does not support the use of challenge-response based administrator authentication. Incase there is a need for support of such an authentication mechanism, a corresponding request should be addressed to the MINT.

For further information, please see the NIT interpretation at:

https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfi201923.pdf

See issue description