In Cryptographic Support, a key-encrypting key that encrypts a personal identification number (PIN) that is received from another location. While a PIN is being used on the system, it remains encrypted under the input PIN-protection key.