PCI PIN Security
Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

PCI PIN Security 23-3: PCI PIN 23-3

What does 23-3 require?

Reversible transformations are never used across levels of the key hierarchy: no working key such as a PIN key is derived from a key-encrypting key; they may only produce other key-encrypting keys from a KEK or differently purposed working keys from a working key.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls