Cryptographic Key
PCIComplianceHubLast updated
A value used with a cryptographic algorithm to transform data, most commonly to encrypt or decrypt it. Symmetric cryptography uses the same key for both operations; asymmetric cryptography uses a matched public and private pair. Under PCI DSS a key is not simply a value but a managed object: it has a defined cryptoperiod, a named custodian, storage restricted to the fewest possible locations, and a defined point of retirement or replacement. Keys that protect account data must themselves be protected, typically by a key encrypting key or a hardware security module.