X9.124-1 Symmetric Key Cryptography for the Financial Services Industry Format Preserving Encryption – Part 1: Definitions and Mode (revision of ANSI X9.124-1-2020)

The following Public Review announcement will appear as shown below in ANSI Standards Action 6/23/2023 Comment Deadline: August 7, 2023.

The proposed standard will describe the base mathematical technique required to achieve secure FPE, and also a set of formats for the encryption of payment card data, including formats that retain various parts of the card data in plaintext format to allow critical functions like card routing and receipt printing. The intention is for the standard to describe the techniques to the point that other X9 work can directly use this tool in standards that describe card data protection protocols, such as the work in X9.119.
Single copy price: Free

X9.119-1 Retail Financial Services -Requirements for Protection of Sensitive Payment Card Data -Part 1: Using Encryption Methods (revision of ANSI X9.119-1-2016)

The following Public Review announcement will appear as shown below in ANSI Standards Action 6/23/2023 Comment Deadline: August 7, 2023.

Theft of sensitive card data during a retail payment transaction is increasingly becoming a major source of financial fraud. Besides an optional encrypted PIN, this data includes magnetic stripe track 2 data: PAN, expiration date, card verification value, and issuer private data. While thefts of this data at all segments of the transaction processing system have been reported, the most vulnerable segments are between the point of transaction device capturing the magnetic stripe data and the processing systems at the acquirer. This document would standardize the security requirements and implementation for a method for protecting this sensitive card data over these segments. Several implementations exist to address this situation. This document would provide guidance for evaluating these implementations.
Single copy price: $100.00