The European Payments Council (EPC) published a new version of the guidelines on cryptographic algorithms usage and key management. The purpose of this document is to provide guidance to the European payment industry in the field of cryptographic algorithms and related key management issues.
Its target audience includes security officers, risk managers, system engineers and systems designers. Although its content does not assume expertise in cryptology, it contains some sections which require a basic mathematical background.
As the research and developments in cryptology are constantly evolving, the EPC plans to annually review and update this document to reflect the state of the art in light of major new developments.
In this version, updates have been made regarding the usage of some algorithms and security protocols, and the sections on quantum computing, distributed ledger technology have been reviewed and updated as needed, including new background information.