5 - Security
DynaGlass| Payment Terminal | PCI PTS POI Security Policy
Page 18 of 22 (
D998200455-10
)
5
Security
5.1
Account-Data Protection
The device always encrypts account data from all three readers using an
X9.24 DUKPT
derived data key.
The device does not support any mechanisms, such as whitelists or SRED disable settings, that would
allow account data to be transmitted unencrypted.
5.2
Algorithms Supported
The device includes the following algorithms:
Triple DES (128 bits)
AES (128 bits, 256 bits)
RSA (Signature verification, 2048 bits)
SHA256 (Signature digest)
ECC (P-256, P-384, P-521)
5.3
Key Management
The device supports the DUKPT key management method. This method uses a unique key for each
transaction, and prevents the disclosure of any past key used by the transaction-originating device.
Using any other key management methods will violate the PCI PTS approval of the device.
It is forbidden to load same key to multiple devices. Each device must have unique keys.