← Back to the reading view
Slides · 4 slides
CVV/CVC: the three digits that never survive an authorization
The same use case told visually, ready to present. Speaker notes carry the full explanation.
Payments
CVV and CVC
The three digits that never survive an authorization
CVV/CVC: the three digits that never survive an authorization · Classical Crypto Today1 / 4
Decimalization
Squeezing hex into 0–9
Public and fixed: all the security comes from the CVK
CVV/CVC: the three digits that never survive an authorization · Classical Crypto Today2 / 4
Three versions
Same formula, one deliberate difference
A stolen CVV2 can't make a working magstripe, and skimmed CVV1 can't shop online
CVV/CVC: the three digits that never survive an authorization · Classical Crypto Today3 / 4
PCI DSS
Never stored after authorization
Its whole value rests on only the issuer being able to compute it
CVV/CVC: the three digits that never survive an authorization · Classical Crypto Today4 / 4
1 / 4
Keys: ← → move, F full screen, G all slides, N notes