What must an encryption policy cover for PCI DSS compliance?

• A.Approved hashing algorithms, certificate renewal dates, tokenization vendors for data at rest and in transit, and escrow contacts at the acquirer for each key custodian
• B.Approved tokenization vendors, key backup locations, and the shredding schedule for retired cryptographic hardware
• C.Approved cipher suites, certificate renewal dates, and the card brands that audit each key custodian
• D.Approved encryption algorithms, key management procedures, cryptographic protocols for data at rest and in transit, and key custodian responsibilities