VISA Format Preserving Encryption VFPE refers to a method of encryption in which the resulting cipher text features the same  form as the input clear text. The form of the text can vary according to use and application.  One of the classic examples is a 16-digit credit card number. After VFPE is used to encrypt a  credit card number, the resulting cipher text is another 16-digit number. This process helps  older databases contain encrypted data of sensitive fields without having to restructure the  database or applications. VFPE allows customers to add encryption to their applications in such a way that the  encrypted data can flow through their systems without requiring a massive redesign of their  application. In our example, if the credit card number is VFPE-encrypted at the point of entry,  the cipher text still behaves as a credit card number. It can flow through business logic until it  meets a back-end transaction server that can VFPE-decrypt it to get the original credit card  number to process the transaction.  Note:  VISA Format Preserving Encryption (VFPE) technology forms part of Visa, Inc.’s  Data Secure Platform (DSP). The use of this function requires a service agreement with  Visa. You must maintain a valid service agreement with Visa when you use DSP/FPE. The FPE features the following requirements: The German banking industry organization, DK, defined a new set of PIN processing  functions to be used on the internal systems of banks and their servers. CCA is designed to  support the functions that are essential to those parts of the German banking industry that  are governed by DK requirements. The functions include key management support for new  AES key types, AES key derivation support, and several DK-specific PIN and administrative  functions. This support includes PIN method APIs, PIN administration APIs, new key management  verbs, and new access control points support that is needed for DK-defined functions. The following requirements must be met to use AES PIN support: GLYPH<SM590000> Hardware: z14 systems and Crypto Express 6S (or Crypto Express5S with CCA V5.2  firmware). GLYPH<SM590000> Operating systems: – z/OS: All functions require ICSF WD17 (H CR77C1), unless otherwise noted. WD17  supports z/OS V2R1, V2R2, and V2R3. – z/OS V2.1 and z/OS V1.13 with the Cryptographic Support for z/OS V1R13-z/OS  V2R1 web deliverable (FMID HCR77B0). – z/VM Version 6.4 with PTFs or newer for guest use.  GLYPH<SM590000> Hardware: – z14 systems and Crypto Express6S with CCA V6.0 firmware or Crypto Express5S with  CCA V5.2 firmware – z13s systems and Crypto Expr ess5S with CCA V5.2 firmware – z13 systems and Crypto Express5S with CCA V5.0 or later firmware – zEC12 or zBC12 and Crypto Express4S with CCA V4.4 firmware – zEC12, zBC12, z196 or z114 and Crypto Express3 with CCA V4.4 firmware AES PIN support for the German banking industry 194  IBM 14 Model ZR1 Technical Guide