PCI PIN Security
Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

PCI PIN Security 5-1: PCI PIN 5-1

What does 5-1 require?

Keys, components and shares are generated within an SCD, using an approved key-generation function of an HSM or POI approved by PCI, of an HSM validated at Level 3 or higher under FIPS 140-3 or its predecessor FIPS 140-2, or of an SCD whose random number generator has been independently certified against NIST SP 800-22, so that every key is equally likely.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls