PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 19-1: PCI P2PE 19-1

What does 19-1 require?

Each key is used only for its intended purpose: key-encryption keys never encrypt account data, account-data keys never encrypt account data, and a derivation key is used only for derivation even though it may derive several purpose-specific keys.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI P2PE controls