Tagged Questions
2
votes
1answer
180 views
PCI-DSS and salt storage
PCI-DSS states the following:
3.5 Protect any keys used to secure cardholder data against disclosure and misuse
I have a service which stores a salted bcrypt hash of the user's PAN. Assuming the ...