Reputation
Next privilege 150 Rep.
Create tags
Badges
3
Newest
 Supporter
Impact
~362 people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
Nov
12
comment Is encrypting credit card numbers one by one with rsautl secure?
@JohnDeters Thank you, I was unaware this part of our plans was noncomplying. I will do as you suggested.
Nov
11
awarded  Scholar
Nov
11
awarded  Supporter
Nov
11
comment Is encrypting credit card numbers one by one with rsautl secure?
Great! We use a 4096 key with the public key in the codebase, and the private key on our local-network payment server. To decrypt the log, we login to the payment server and paste the cyphertext into openssl's stdin. We intend to change the key every couple years.
Nov
11
accepted Is encrypting credit card numbers one by one with rsautl secure?
Nov
11
comment Is encrypting credit card numbers one by one with rsautl secure?
We are PCI certified so that's fine. But I agree it shouldn't be taken lightly; we decided payment processing is a core competency for us, because of the market edge it gives us in responding to customer needs combined with a software customization framework.
Nov
7
awarded  Student
Nov
7
asked Is encrypting credit card numbers one by one with rsautl secure?