PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 12-4: PCI P2PE 12-4

What does 12-4 require?

Symmetric key components are combined in a way that leaves every active bit of the key undeterminable unless all the other components are held, for example by XOR-ing full-length components, and the combined key exists only within the SCD; joining two halves together is not permitted.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.