For whomever is interested, IIRC, this requirement of random layout came up in late 2000/early 2010 due to: - keyloggers (safer to click instead of type instea

For whomever is interested, IIRC, this requirement of random layout came up in late 2000/early 2010 due to: - keyloggers (safer to click instead of type instead -> on-screen keyboard then) - but then it turned out Internet Explorer had a bug which allowed attackers to read the mouse click events' X/Y coordinates in other windows which then could be mapped to the on-screen keyboard digits if the layout is predictable