Home/ Questions/Q 6253091
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T13:55:38+00:00

I’ve been tasked with handling some credit card data storage. After reading the PCI

  • 0

I’ve been tasked with handling some credit card data storage.
After reading the PCI compliance questionnaire ( including the NIST 800-57)
and some googling ive found few resources that are both (kinda) recent and compliant.

Here are some resources ive found:

http://www.dijksterhuis.org/creating-salted-hash-values-in-c/

http://msdn.microsoft.com/en-us/magazine/cc164054.aspx

Is there a best .NET algorithm for credit card encryption?

My Question:
The basic coding logic for encrypting and decrypting the information seems to boil down to the way Yossi does it here:

http://yossi-yakubov.blogspot.com/2010/07/aes-encryption-using-c-short-way.html

Am i correct ? Any more ‘standards compliant’ methods ? Any other resources someone can recommend?

Thanks alot

UPDATE
I dont need to transmit the credit card numbers – i need to recieve and encrypt them for storage in the DB.
If this data ever gets transmited it is always done over HTTPS ( so im good in that respect right ? )

Yes i missed this important information when i first posted – but thanks alot for the quick replys, really.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It sounds scary that someone outside of a certified credit card institute tries to save this information, no matter if encrypted or unencrypted (I assume that it’s not one-way encrypted).

    Does your business case really require that? Does your company really want to take the risk of storing credit card numbers?

    • 0