Encryption Key

PCIComplianceHub · Last updated 22 September 2026

A cryptographic key used specifically to encrypt and decrypt data, as opposed to keys used for signing, message authentication or wrapping other keys. See Cryptographic Key under C for how symmetric and asymmetric keys differ, and Key Management for the controls PCI DSS places around key generation, storage, rotation and retirement.