PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 15-1: PCI P2PE 15-1

What does 15-1 require?

A cryptographic validation mechanism, such as hashes or key check values under ISO 11568, confirms that loaded keys and components are authentic and intact; check values are produced by a process that uses every part of the key or component, TDEA may use either the CMAC method or encryption of a zero block while AES must use CMAC, and the truncation rules apply wherever check values are recorded or displayed.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.