133 reputation
3
bio website
location
age
visits member for 2 years, 9 months
seen Nov 12 '13 at 10:28

Nov
12
comment Is encrypting credit card numbers one by one with rsautl secure?
@JohnDeters Thank you, I was unaware this part of our plans was noncomplying. I will do as you suggested.
Nov
11
awarded  Scholar
Nov
11
awarded  Supporter
Nov
11
comment Is encrypting credit card numbers one by one with rsautl secure?
Great! We use a 4096 key with the public key in the codebase, and the private key on our local-network payment server. To decrypt the log, we login to the payment server and paste the cyphertext into openssl's stdin. We intend to change the key every couple years.
Nov
11
accepted Is encrypting credit card numbers one by one with rsautl secure?
Nov
11
comment Is encrypting credit card numbers one by one with rsautl secure?
We are PCI certified so that's fine. But I agree it shouldn't be taken lightly; we decided payment processing is a core competency for us, because of the market edge it gives us in responding to customer needs combined with a software customization framework.
Nov
7
awarded  Student
Nov
7
asked Is encrypting credit card numbers one by one with rsautl secure?