Technical Specifications

Host Connectivity

Please refer to the technical specifications for:

• ProtectServer Gold

Cryptographic Algorithms

• DES, 3DES, SEED, RSA, SHA-1, MD5, HMAC-SHA-1

Cryptographic and key management processes

PIN Processing

• PIN verification (IBM 3624 Offset and Visa PVV methods)
• PIN translation (DES, 3DES, SEED)
• PIN generation
• PIN printing (ProtectHost White Only)

Message Authentication

• DES-MAC (ANSI X9.9) DES-MAC (ANSI X9.19), 3DES-MAC, HMAC-SHA-1
• RSA Digital Signature

Message Integrity

• MD-5, SHA-1 message digests

Data Confidentiality

• Data encryption and decryption (DES, 3DES, SEED)

EMV

• Application cryptogram verification (ARQC, TC, AAC) and response cryptogram generation (ARPC).
• Issuer scripts – confidentiality and integrity, including PIN change.
• Support for major EMV implementations: M/Chip, VSDC, AEIPS, J/Smart, EMV 4.1 including Common Core Definition (CCD) and ZKA SECCOS.

Card Authentication

• American Express CSC, JCB CAV, MasterCard CVC, Visa CVV

Key Management and Operations

• Dynamic/Master session keys for Interchange links (including MasterCard and Visa), ATMs and EFTPOS terminals
• Derived Unique Key Per Transaction (DUKPT)
• Remote ATM key initialization (Diebold and NCR)
• Administration keys
• Printing of key components (Available on the ProtectHost White platform only)
• ZKA Key Derivation, PAC/MAC

Public Key Certificates

• PKCS#10 certificate requests
• X509 v3