Tokenization and Other Methods of Security for Cardholder Data
Jeff Stapleton, Ralph Spencer Poore · Information Security Journal A Global Perspective · 2011
This paper compares the relative security strengths and practical use of tokenization with other cardholder data protection methods including truncation, masking, encryption, hash, and keyed hash. The usefulness of each method is described, and the subtle security weaknesses of combining methods are explored. Further, the inherent complexities of using cryptographic methods with sound key management practices are also presented.