Skip to main content
4 votes
Accepted

Why is DUKPT TDES allowed by PCI negating NIST

The payment card industry is somewhat special in that most of the hardware involved in their networks is owned by other people, notably individual merchants, who own the terminals and payment devices ...
bk2204's user avatar
  • 3,416
1 vote

Is Triple DES still considered safe to use?

The quick answer: No. It's no longer considered secure. Here's why: It's vulnerable to Sweet32 Birthday attacks. NIST disallows usage of 3DES since 2023 (see NIST SP 800-131A Revision 2. Federal ...
U. Bulle's user avatar
  • 111

Only top scored, non community-wiki answers of a minimum length are eligible