ComplianceConfig
interface ComplianceConfig {
keyCreatedAt?: Date;
keyId: string;
onEvent?: (event: EarnmoreEvent) => void;
pbkdf2Iterations?: number;
}Source: types.ts:18
Properties
keyCreatedAt: Date
Timestamp when this key/passkey was provisioned. Used by EarnmoreClient.isKeyExpired() to enforce NIST SP 800-57 §5.3.6 cryptoperiod recommendations. Defaults to the time the EarnmoreClient was constructed.
keyId: string
Key identifier for CVV generation/validation (must be a valid UUID).
Per NIST SP 800-57 / ISO 11568-1, embedding a key ID in the authenticated message enables key rotation without reissuing all cards. Store the keyId alongside each card record and pass it back during CVV validation.
onEvent: (event: EarnmoreEvent) => void
Audit event callback (CSF 2.0 DE.AE-02 / ISO 27001:2022 A.8.15).
Called for every significant cryptographic operation. Events never contain a full PAN, CVV, or raw key material — only masked PAN and metadata. Feed these events into your SIEM, anomaly detection, or audit log.
pbkdf2Iterations: number
PBKDF2-SHA256 iteration count for CVV key derivation. Default: PCI_DSS_PBKDF2_ITERATIONS (310,000) — satisfies NIST SP 800-132 and PCI-DSS Req 3.7.1. Minimum enforced by the library: 1,000.
Pass a lower value only in non-production contexts (e.g. unit tests).