Financial services — Personal identification number (PIN) management and security — Part 5: Methods for the generation, change, and verification of PINs

This document specifies cryptographic methods for:

—     PIN generation;

—     reference PIN change;

—     transaction PIN verification.

These PIN management functions can be implemented using:

—     encryption using an approved algorithm (see Table 1);

—     CMAC using an approved block cipher (see Table 1);

—     HMAC using an approved hash algorithm (see Table 1).

Refer to ISO 9564-1 for basic principles & requirements regarding PIN establishment.