PCI DSS Version 3.1 Has Arrived | blog,pci,cryptography | Control Gap
The PCI Security Standards Council today published the expected update to PCI releasing these documents including some specific migration guidance:
Posts about:
pci (7)
PCI Security Standards Council set to kill off SSL in PCI DSS/PA-DSS 3.1 updates | blog,pci,cryptography | Control Gap
The PCI council has released an announcement that they are preparing an updated version of the PCI DSS (v3.1) and PA-DSS (v3.1), where they will be detailing several clarifications and changes to requirements. One of the major changes that will be included in v3.1 is that all versions of SSL are no longer considered acceptable as “strong cryptography”. The bulletin from the council states that adherence to PCI DSS v3.1 and PA-DSS v3.1 standard will be immediate with future-dated requirements to allow organizations time to implement changes.
What is Format Preserving Encryption and is it suitable for PCI DSS?
Format Preserving Encryption or FPE is recent technology that is beginning to show up in payment solutions with the promise of simplifying PCI DSS compliance. If you...
Analysis of PCI DSS 3.0 | blog,pci | Control Gap
PCI DSS 3.0 was released Nov 2013. There are new and changed requirements with a more organized look. Check out our in-depth analysis and commentary in the presentation