To maintain compliance with Payment Card Industry (PCI) PIN guidelines, organizations will need to use structures called key blocks to manage encrypted symmetric keys. This means organizations that rely solely on cryptograms will need to plot a pathway to implementing key blocks in order to maintain compliance.
The most common implementations of these key block structures is the TR-31 structure defined in the X9 TR-31 technical report: Interoperable Secure Key Exchange Block Specification for Symmetric Algorithms (2018).
Any organization looking to make this migration should purchase the X9 TR-31 report as a companion to this document. This whitepaper discusses migration to TR-31 key blocks in compliance with PCI PIN.
