PIN management functions shall be implemented in software and hardware in such a way that the functionality cannot be modified without detection, and that the data cannot be obtained or misused. Encrypting the same PIN with the same key but for a different bank account shall not predictably give the same cipher text. Security of the PIN encryption shall depend on secrecy of the key, not secrecy of the algorithm.