Timeline for PCI compliant RSA key generation and getting value of private exponent
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 16, 2015 at 20:53 | vote | accept | user1563721 | ||
| Mar 16, 2015 at 18:59 | comment | added | user1563721 | And yes, the RSA key is used for signing or decryption. And such encrypted backup can be imported on secure desktop into token or smart card, if needed. | |
| Mar 16, 2015 at 18:57 | comment | added | user1563721 | I need to have a backup of RSA private key, but also be compliant with all requirements. AES key could be in components maintained by key custodians. RSA private key would be only in the encrypted form by this AES key or in token secured memory. If I would like to use my backup I can do it only if all of key custodians inputs their key components. I think this could work. | |
| Mar 16, 2015 at 18:36 | history | answered | AndyMac | CC BY-SA 3.0 |