DUKPT (Derived Unique Key Per Transaction)

PCIComplianceHub · Last updated 22 September 2026

A key management scheme in which every transaction is encrypted under a distinct key derived from a base key and a transaction counter, so no two transactions share a key and a compromised key exposes only one transaction. DUKPT is widely used in PIN entry devices and point-to-point encryption solutions, and it means a captured key cannot be used to decrypt earlier or later traffic.