PCI PIN Security
Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

PCI PIN Security 6-1.2: PCI PIN 6-1.2

What does 6-1.2 require?

At no stage of key generation can a single person work out or obtain any portion of a clear-text key, or every component of a key; components of full length, and shares under a recognised secret-sharing scheme, do not count as key parts.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls