| Why not have a temporary key that's randomly generated either from /dev/random or the current time in microseconds, and send the temp key plus the encrypted cc# in two seperate messages to the storage server where it's decrypted then recrypted with a proper key. That way the malicious attacker would have to intercept the cc# as it was entered to actually get at the info. |