5 min read
Exploring Secure Cryptographic Devices for Retail Financial Services
The ANSI X9.24-1: 2017 standard requires the use of secure cryptographic devices (SCDs) in the context of symmetric key cryptography and refers to...
2 min read
Mobile Banking & Payment App Security: Anti-Tampering Insights
Mobile banking and payment app security is deeply linked to their ability to prevent attackers from tampering with them.
2 min read
Key Blocks in ANSI X9.24-1-2017: An Introduction
Key Blocks have been invented as a standard way for protecting the integrity of symmetric cryptographic keys and for identifying what the keys can be...
2 min read
PCI Key Blocks: Phases & Key Management Explained
In June 2019, the PCI Security Standards Council issued an information supplement titled PCI PIN Security Requirement 18-3 – Key Blocks, which...
3 min read
The SHA-1 Attack Further Emphasizes the Need for Crypto-Agility
The first practical chosen-prefix collision attack on SHA-1 was announced in January 2020 by researchers Gaëtan Leurent and Thomas Peyrin: “SHA-1 is...
2 min read
SHA-1 is Practical and Cost-Effective to Crack Now
This article discusses recent warnings that a chosen-prefix collision attack on SHA-1 is now practical and cost-effective for attackers.
2 min read
ANSI X9.24-1-2017: General Key Management Requirements
The ANSI X9.24-1-2017 norm details how symmetric cryptographic keys should be managed and handled by the relevant actors of the retail financial...
3 min read
A Guide to FIPS 140-3 Compliance Standards
FIPS 140 (“Federal Information Processing Standard”) is a series of security standards published by the U.S. government that specify security...
4 min read
Symmetric Key Encryption - why, where and how it’s used in banking
In today’s cyber-world there is an ever-present risk of unauthorized access to all forms of data. Most at risk is financial and payment system data...