HSM Functions

The HSM provides an extensive range of functions including support for key management, PIN generation, encryption and verification, and Message Authentication Code (MAC) generation and verification. It supports standard VISA card operations, with functions for PVV and CVV generation and verification.  All commands operate using the Electronic Code Book (ECB) mode of DES unless otherwise stated.

Key Management

The HSM supports Master/Session Key and Transaction Key management techniques.

Security for key management is ensured by the use of an enforced key hierarchy and the use of multiple Local Master Key (LMK) pairs. The HSM can use Smartcards (compatible with ISO 7816) to provide a convenient means of handling LMKs.

_{Figure 1 - Key Hierarchy}