The HSM provides general Watchword support, with commands to:
Generate a Watchword Key.
Translate a Watchword Key from encryption under the LMK to encryption under a ZMK.
Translate a Watchword Key from encryption under a ZMK to encryption under the LMK.
Verify a Watchword response.
Generate a decimal MAC
Verify a decimal MAC