Knowledge check

Tokenizing card numbers and SSNs with format-preserving encryption

5 questions testing what you just read — no login, no tracking, just immediate feedback.

Question 1 of 5

Why not just encrypt a stored card number with AES-GCM?

Question 2 of 5

What does vaultless (FPE) tokenization replace the token vault with?

Question 3 of 5

When the first 6 and last 4 digits of a PAN stay in the clear, why put them in the FF1 tweak?

Question 4 of 5

Why is a 15-digit card number a problem for 'keep 6, keep 4, encrypt the rest'?

Question 5 of 5

FF1 tokens for valid SSNs can come out starting with 000, which no real SSN does. What's the standard fix when downstream systems must accept the token?

0 / 5 answered