Storing credit card details with mcrypt or GnuPG

前端 未结 3 970
灰色年华
灰色年华 2021-02-10 06:14

I have a requirement to store credit card details (not storing is NOT an option).

Using mcrypt with mcrypt_dev_random to generate init_vector takes varying ages to encry

3条回答
  •  忘掉有多难
    2021-02-10 06:43

    Remember: the First Rule of Cryptography is "don't do it yourself".

    MCRYPT_DEV_URANDOM is enough for robust encryption, but "managing credit card information" is a much more complicated affair than simply "encrypt 'em all and let God sort out His own".

    That "not storing is NOT an option" sounds to me as if you (or better, those above you) Are Doing It Wrong. You should not be researching this, or be the one to propose a solution. Do not be the fall guy.

    https://www.pcisecuritystandards.org/merchants/how_to_be_compliant.php

提交回复
热议问题