Payment Tokenization

1. EMV payment tokenisation

   Token requestors, token service providers and token domain restrictions.

2. PCI tokenization guidance

   PCI scope reduction through tokenization.

3. Format-preserving encryption

   FF1 and FF3 methods in NIST SP 800-38G.

4. Vaulted vs vaultless

   Design tradeoffs for token generation and storage.

5. Token lifecycle

   Provisioning, suspension and deletion.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.