Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security
PCI PIN Security 7-1: PCI PIN 7-1
What does 7-1 require?
Written policies and procedures govern the generation of every key, and they are known to custodians, their supervisors and technical management.
Other controls in Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security