> => 1023 octets are a very large value for a PIN. BTW
> with an enforced low limit of retries a short (4 digits) value
> is common, i.e.:

Seems reasonable, since HSM PINs are always 1234 anyway. :)