Timeline for What is two full-length key components PCI DSS requirement 3.5.3
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 2, 2018 at 16:00 | comment | added | Maarten Bodewes | So undoubtedly the latter is required. The other downgrade the security of the key; even if you just have "--ss----" then you have 25% less key space to search. Probably needless to say: a password is not a key - I presume that this is just an example. | |
| Dec 2, 2018 at 10:28 | comment | added | Michael | "Consider for example the secret sharing scheme in which the secret phrase "password" is divided into the shares "pa––––––", "––ss––––", "––––wo––", and "––––––rd". Above example "pa-----" it is 2 letters ,but PCI DSS require at least two full-length key components ，it means it need two "password" key components correct? Or we need two 8 eight letter components A B which A xor B = "password" ? | |
| Nov 30, 2018 at 8:29 | history | answered | Maarten Bodewes | CC BY-SA 4.0 |