Technical Specifications

Cryptographic Algorithms

• DES, 3DES, SEED, RSA, SHA-1, MD5, HMAC-SHA-1

Cryptographic and Key Management Processes

PIN Processing

• PIN generation: calculation of IBM 3624 Offset or Visa PVV
• PIN printing

Message Authentication

• DES-MAC (ANSI X9.9) DES-MAC (ANSI X9.19), 3DES-MAC, HMAC-SHA-1

Message Integrity

• MD-5, SHA-1 message digests

Data Confidentiality

• Data encryption and decryption (DES, DES3, SEED)

Card authentication

• Calculation of CVV or CSC

EMV Issuer RSA key pair management

• Generate issuer key pair; self-sign issuer public key for submission to CA – Visa or MasterCard
• Process self-signed CA public key
• Process issuer certificate received from CA

EMV Issuer Master Keys

• Initialization and storage of 3DES keys used to derive unique-per-card keys

EMV card personalization

• Derive unique-per-card 3DES keys for Application Cryptograms, Secure Messaging and ICC Dynamic Numbers; encrypt for transport to card
• Sign static data for SDA; provide signature for injection onto card for DDA and/or PIN encipherment; generate RSA key pair; create certificate;
• encrypt private key for transport to card
• For off-line PIN, generate PIN; encrypt for transport to card; print PIN Mailer

Public Key Certificates

• PKCS#10 certificate requests
• X509 v3
• EMV Certificates

EMV Testing facilities

• Emulation of CA processing
• Testing of cards prior to issue