Decryption
What is Decryption?
The process of converting encrypted data back to its original plaintext form using a cryptographic key or algorithm.
Terms that appear alongside decryption
Each of these is named in at least one of the same controls as decryption. The number is how many controls name both.
- nist 2 shared controls
- breach notification 2 shared controls
- encryption at rest 2 shared controls
- encryption 2 shared controls
- authentication 2 shared controls
- key management 2 shared controls
Frameworks that govern decryption
What the standards actually require on decryption
Requirements naming decryption across 6 standards, quoted from the control text.
Under the ITAR, using access information to cause technical data located outside the United States to be in unencrypted form is a release, and releasing previously encrypted data in that way is an export (120.50(a)(6), 120.56(a)(4)). A U.S.
us-itar-and-ear-export-control-and-data-security::ITAR 120.50(a)(6) and 120.56(a)(4) · Prevent decryption of controlled data outside the United States by unauthorised persons →Implement a mechanism to encrypt and decrypt ePHI. NIST recommends FIPS 140-validated cryptography, encryption at rest for all ePHI stores, and key management aligned to SP 800-57.
164.312(a)(2)(iv) · Encryption and Decryption (Addressable) →Implement a mechanism to encrypt and decrypt ePHI. NIST recommends FIPS 140-validated cryptography, encryption at rest for all ePHI stores, and key management aligned to SP 800-57.
164.312(a)(2)(iv) · Encryption and Decryption (Addressable) →No account data is stored on any system within the merchant's decryption environment.
pci-p2pe::MM-A-1.7 · PCI P2PE MM-A-1.7 →For almost all protocols the main recommendation is a hybrid approach in which a well-established algorithm and a post-quantum algorithm are used together within one protocol, so that an attacker must break both;
netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::HYBRID · Deploy PQC in hybrid combinations and guard against downgrade →PAN must be made unreadable wherever it is stored, using one of these methods: (1) one-way hashes of the whole PAN based on strong cryptography;
3.5.1 · 3.5.1 Stored PAN rendered unreadable →Questions people ask about decryption
What is Decryption?
Why is Decryption important for compliance?
Which compliance frameworks address Decryption?
Where can I learn more about Decryption?
See how Decryption applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.