3 edited body; edited tags
source | link

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input (some of them are in encrypted form) and then returned back (some of them are in encrypted form).

I have 2 simple questions:

  1. What elements need to be encrypted as input and output? For now - how I understand irit - only PIN, PAN, track2data and CVV code need to be encrypted.

  2. What elements need to be masked and how should I do it? For now I was saving in the log files only the last 4 digits of the PAN (for example - ***1234), CVV code is completely masked (for example - **), track2data is completely masked and and PIN is completely masked.

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input (some of them are in encrypted form) and then returned back (some of them are in encrypted form).

I have 2 simple questions:

  1. What elements need to be encrypted as input and output? For now - how I understand ir - only PIN, PAN, track2data and CVV code need to be encrypted.

  2. What elements need to be masked and how should I do it? For now I was saving in the log files only the last 4 digits of the PAN (for example - ***1234), CVV code is completely masked (for example - **), track2data is completely masked and and PIN is completely masked.

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input (some of them are in encrypted form) and then returned back (some of them are in encrypted form).

I have 2 simple questions:

  1. What elements need to be encrypted as input and output? For now - how I understand it - only PIN, PAN, track2data and CVV code need to be encrypted.

  2. What elements need to be masked and how should I do it? For now I was saving in the log files only the last 4 digits of the PAN (for example - ***1234), CVV code is completely masked (for example - **), track2data is completely masked and and PIN is completely masked.

2 Formatting and grammar.
source | link

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input  (some of them are in encryptionencrypted form) and then returned is back  (some of them are in encryptionencrypted form).

I have 2 simple questions:

  1. What elements need to encryptbe encrypted as input and output? For now - how I'mI understand ir - only PIN,PAN PAN, track2data and CVV code need to encryptbe encrypted.

  2. What elements need to maskingbe masked and how should I do it? For now I was savesaving in the log files only 4the last digit4 digits of the PAN  (for example - "*1234"), CVV code is full masked (for example - ""***1234), CVV code is completely masked (for example - **), track2data is fullcompletely masked and and PIN was fullis completely masked.

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input(some of them are in encryption form) and then returned is back(some of them are in encryption form).

I have 2 simple questions:

  1. What elements need to encrypt as input and output? For now - how I'm understand - only PIN,PAN, track2data and CVV code need to encrypt.

  2. What elements need to masking and how do it? For now I was save in log files only 4 last digit of the PAN(for example - "*1234"), CVV code is full masked (for example - ""), track2data is full masked and and PIN was full masked.

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input  (some of them are in encrypted form) and then returned back  (some of them are in encrypted form).

I have 2 simple questions:

  1. What elements need to be encrypted as input and output? For now - how I understand ir - only PIN, PAN, track2data and CVV code need to be encrypted.

  2. What elements need to be masked and how should I do it? For now I was saving in the log files only the last 4 digits of the PAN  (for example - ***1234), CVV code is completely masked (for example - **), track2data is completely masked and and PIN is completely masked.

1
source | link

PCI compliance simple questions

For now I read PCI compliance document and I don't understand any things.

I have a program, which takes sensitive and cardholder data as input(some of them are in encryption form) and then returned is back(some of them are in encryption form).

I have 2 simple questions:

  1. What elements need to encrypt as input and output? For now - how I'm understand - only PIN,PAN, track2data and CVV code need to encrypt.

  2. What elements need to masking and how do it? For now I was save in log files only 4 last digit of the PAN(for example - "*1234"), CVV code is full masked (for example - ""), track2data is full masked and and PIN was full masked.