Why it matters

A PIN pad that encrypts every PIN with the same key is a single point of failure: steal the key once and every past PIN falls. DUKPT (Derived Unique Key Per Transaction, ANSI X9.24-1) gives each transaction its own key, and the PIN pad cannot work backwards to old keys. It is how most PIN pads and payment terminals encrypt PINs, and often MACs and data too.