Why it matters
The PIN is the most protected value in a payment. It is never sent alone: it is packed into a PIN block (ISO 9564-1), encrypted in the PIN pad, and only ever decrypted inside an HSM. Every PIN-handling component must build, encrypt or translate PIN blocks exactly as its partner expects:
- PIN pads;
- terminal applications;
- acquirer hosts;
- switches;
- issuer systems.