Yearly update of the “Guidelines on cryptographic algorithms usage and key management”

The European Payments Council (EPC) published a new version of the document called “Guidelines on cryptographic algorithms usage and key management”. Its purpose is to offer guidance to the European payment industry concerning cryptographic algorithms and related key management issues.

This new version includes updates related to authenticated encryption, homomorphic encryption and an overall review of referred standards and algorithms.

Its target audience includes security officers, risk managers, system engineers and systems designers. While the content of this document does not presuppose expertise in cryptology, certain sections require a basic mathematical background.

The document specifies a number of recommendations and best practices on cryptographic algorithms, security protocols, confidentiality and integrity protection and key management in the first section, for which further detailed background information may be found in the subsequent sections of the document.

In producing these guidelines, the European Payments Council (EPC) aims to provide a reference basis to support payment service providers (PSPs). However, it needs to be recognised that research and developments in cryptology are constantly evolving. Therefore, the EPC plans to annually review and update the document to reflect the state of the art in light of major new developments and to keep it aligned with the documents referenced.

Given the continuous evolution of research and developments in cryptology, the EPC plans to annually review and update this document to reflect the state of the art in light of major new developments.

___________

DOCUMENT DOWNLOAD

EPC342-08 v13.0 Guidelines on Cryptographic Algorithms Usage and Key Management.pdf