Re: Database Encryption and PCI issue.

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2008-02-12 m.farid.shawara () gmail com wrote:
> We are in our way to have a PCI DSS complaint - and we are facing a
> challenge to have encryption with our Database Systems.
>
> The problem is that the Application we are using is using the PIN as a
> primary key in the DB tables - and this will make it very hard to
> encrypt the PIN columns ...

Why do you need to store the PINs instead of (salted) hashes thereof?

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq