Protecting Memory Secrets: Difference between revisions
added definitions/meanings of PAN and SAD
(Added Wren) |
(added definitions/meanings of PAN and SAD) |
||
Line 60:
PCI Point-to-Point-Encryption (P2PE) Standard (v3.1) [https://docs-prv.pcisecuritystandards.org/P2PE/Standard/PCI-P2PE-v3_1-Standard.pdf PCI P2PE Standard] see requirements 2A-2.3 & 2B-1.5
* has two types of secrets called PAN (Primary Account Number) and SAD (Sensitive Authentication Data)
* don't secrets in working memory any longer than strictly necessary
* developers should have secure coding traing for their langauge that includes managing sensitive data in memory
| |||