According to PCI-DSS 3.4 Requirement:
Render PAN unreadable anywhere it is stored by using the below methods:
- One-way hash
- Index tokens and pads
- Strong cryptography with associated key-management processes and procedures
My question based on above requirement is:
So if need to encrypt the credit card details which one would be a better process?
If we are going to encrypt credit card number for storage, then we should have Data Encryption Key(DEK) for encrypting the credit card number. So do we need to generate unique encryption key for encrypting each credit card number? or To generate unique encryption key for each user(each user may have two or more CC)? or To generate a single encryption key for encrypting all the credit card numbers?
Also provide any links regarding one time pads or please explain about it?