To render PAN unreadable anywhere it is stored one-way hashes must be implemented based on strong cryptography on