This resource is no longer available
Securosis Analyst Report on PCI Compliance: Tokenization vs Encryption
Thousands of companies have replaced trusted cryptographic systems with tokenization to secure data. For securing data at rest and in motion, encryption is the backbone technology in an IT arsenal. You simply cannot avoid encrypting to secure archives and network communications.
However there are multiple use cases where tokenization offers better security -- with lower cost and less management complexity. In this research paper, analyst and CTO of Independent research analyst firm, Securosis, Adrian Lane discusses appropriate uses for tokenization, and why companies are looking to this new approach to secure sensitive data.
The key goals of this paper are to provide the reader with a clear understanding of the differences between tokenization and encryption, and the types of security problems tokenization can help solve.