Card Authentication Key

Definition
A Card Authentication Key (CAK) is

"a PIV authentication mechanism (or the PIV Card key of the same name) that is implemented by an asymmetric or symmetric key challenge/response protocol. The CAK is an optional mechanism defined in NIST Special Publication 800-73-4."