|
Function |
Command |
|
GENERATING A KEY |
|
|
Generate
a Key |
A0 (A1) |
|
Generate
and Print a Component |
A2 (A3) |
|
Generate
and Print a Key as Split Components |
NE (NF) |
|
Form
a Key from Encrypted Components |
A4 (A5) |
|
Generate
a CVK Pair |
AS (AT) |
|
Generate
a TMK, TPK or PVK |
HC (HD) |
|
Generate
and Print a TMK, TPK or PVK |
OE (OF) (OZ) |
|
Generate
a Pair of PVKs |
FG (FH) |
|
Generate
a TAK |
HA (HB) |
|
Generate
a Watchword Key |
FO (FP) |
|
Generate
ZEK/ZAK |
FI (FJ) |
|
Generate
a ZPK |
IA (IB) |
|
Form
a ZMK from Three ZMK Components |
GG (GH) |
|
Form
a ZMK from 2 to 9 ZMK Components |
GY (GZ) |
|
Generate
and Print a ZMK Component |
OC (OD) (OZ) |
|
|
|
|
TRANSLATING A KEY (FROM ONE ENCRYPTION
TO ANOTHER) |
|
|
Import
a Key |
A6 (A7) |
|
Export
a Key |
A8 (A9) |
|
Translate
Key Scheme |
B0 (B1) |
|
|
|
|
CVK PAIR |
|
|
Translate
a CVK Pair from Old LMK to New LMK Encryption |
AY (AZ) |
|
Translate
a CVK Pair from LMK to ZMK Encryption |
AU (AV) |
|
Translate
a CVK Pair from ZMK to LMK Encryption |
AW (AX) |
|
|
|
|
TMK / TPK / PVK |
|
|
Translate
a TMK, TPK or PVK |
AA (AB) |
|
Translate
a TMK, TPK or PVK from LMK to Another TMK, TPK or PVK |
AE (AF) |
|
Translate
a TMK, TPK or PVK from LMK to ZMK Encryption |
FE (FF) |
|
Translate
a TMK, TPK or PVK from ZMK to LMK Encryption |
FC (FD) |
|
|
|
|
TAK |
|
|
Translate
a TAK |
AC (AD) |
|
Translate
a TAK from LMK to TMK Encryption |
AG (AH) |
|
Translate
a TAK from LMK to ZMK Encryption |
MG (MH) |
|
Translate
a TAK from ZMK to LMK Encryption |
MI (MJ) |
|
WWK |
|
|
Translate
a Watchword Key from LMK to ZMK Encryption |
FQ (FR) |
|
Translate
a Watchword Key from ZMK to LMK Encryption |
FS (FT) |
|
ZEK / ZAK |
|
|
Translate
a ZEK/ZAK from LMK to ZMK Encryption |
FM (FN) |
|
Translate
a ZEK/ZAK from ZMK to LMK Encryption |
FK (FL) |
|
ZPK |
|
|
Translate
a ZPK |
KC (KD) |
|
Translate
a ZPK from LMK to ZMK Encryption |
GC (GD) |
|
Translate
a ZPK from ZMK to LMK Encryption |
FA (FB) |
|
ZMK |
|
|
Translate
a ZMK |
GE (GF) |
|
Translate
ZMK from ZMK to LMK encryption |
BY (BZ) |
|
GENERAL |
|
|
Translate
Keys from Old LMK to New LMK |
BW (BX) |
|
Erase
the Key Change Storage |
BS (BT) |
|
Translate
Decimalisation Table from Old to New LMK |
LO (LP) |
|
|
|
|
PIN SOLICITATION |
|
|
Load
Solicitation Data to User Storage |
QA (QB) |
|
Final
Load of Solicitation Data to User Storage |
QC (QD) |
|
|
|
|
CLEAR PIN |
|
|
Encrypt
a Clear PIN |
BA (BB) |
|
Decrypt
an Encrypted PIN |
NG (NH) |
|
|
|
|
GENERATING A PIN, PIN OFFSET,
PVV |
|
|
Derive
a PIN Using the Diebold
Method |
GA (GB) |
|
Derive
a PIN Using the IBM Method |
EE (EF) |
|
Generate
a Random PIN |
JA (JB) |
|
Generate
a Diebold PIN Offset |
CE (CF) |
|
Generate
an IBM PIN Offset |
DE (DF) |
|
Generate
a VISA PIN Verification Value |
DG (DH) |
|
|
|
|
VERIFY AN INTERCHANGE PIN |
|
|
Verify
an Interchange PIN Using the Comparison Method |
BE (BF) |
|
Verify
an Interchange PIN Using the Diebold Method |
EG (EH) |
|
Verify
an Interchange PIN Using the IBM Method |
EA (EB) |
|
Verify
an Interchange PIN Using the VISA Method |
EC (ED) |
|
|
|
|
VERIFY A TERMINAL PIN |
|
|
Verify
a Terminal PIN Using the Comparison Method |
BC (BD) |
|
Verify
a Terminal PIN Using the Diebold
Method |
CG (CH) |
|
Verify
a Terminal PIN Using the IBM Method |
DA (DB) |
|
Verify
a Terminal PIN Using the VISA Method |
DC (DD) |
|
|
|
|
TRANSLATING A PIN |
|
|
Translate
a PIN and PIN Length |
BG (BH) |
|
Translate
a PIN from LMK to ZPK Encryption |
JG (JH) |
|
Translate
a PIN from TPK to LMK Encryption |
JC (JD) |
|
Translate
a PIN from TPK to ZPK Encryption |
CA (CB) |
|
Translate
a PIN from One ZPK to Another |
CC (CD) |
|
Translate
a PIN from ZPK to LMK Encryption |
JE (JF) |
|
Translate
PIN Algorithm |
BQ (BR) |
|
|
|
|
PIN MAILER |
|
|
Print
PIN/PIN and Solicitation Data |
PE (PF) (PZ) |
|
Print a PIN Solicitation Mailer |
OA (OB) (OZ) |
|
Verify
PIN/PIN and Solicitation Mailer Cryptography |
PG (PH) |
|
Verify
Solicitation Mailer Cryptography |
RC (RD) |
|
|
|
|
MESSAGE AUTHENTICATION |
|
|
Generate
a MAC |
MA (MB) |
|
Generate
MAC (MAB) for Large Message |
MQ (MR) |
|
Verify
a MAC |
MC (MD) |
|
Verify
and Translate a MAC |
ME (MF) |
|
Generate
MAC (MAB) using ANSI X9.19 Method for a Large Message |
MS (MT) |
|
Generate
a Binary MAC (Base24) |
MK (ML) |
|
Verify
a Binary MAC (Base24) |
MM (MN) |
|
Verify
and Translate a Binary MAC (Base24) |
MO (MP) |
|
Generate
MAC |
M6(M7) |
|
Verify
MAC |
M8(M9) |
|
Verify
and Translate MAC |
MY(MZ) |
|
|
|
|
MESSAGE ENCRYPTION |
|
|
Decrypt
Data Block |
M0(M1) |
|
Encrypt
Data Block |
M2(M3) |
|
Translate
Data Block |
M4(M5) |
|
|
|
|
PRINT FORMATTING |
|
|
Load
a PIN Text String |
LI (LJ) |
|
Load
Formatting Data to HSM |
PA (PB) |
|
Load
Additional Formatting Data to HSM |
PC (PD) |
|
|
|
|
HMAC FUNCTIONS |
|
|
Generate
an HMAC Secret Key |
L0(L1) |
|
Generate
an HMAC on a Block of Data |
LQ(LR) |
|
Verify
an HMAC on a Block of Data |
LS(LT) |
|
Import
an HMAC under a ZMK |
LU(LV) |
|
Export
an HMAC under a ZMK |
LW(LX) |
|
Translate
a HMAC Key from Old LMK to New LMK |
LY(LZ) |
|
|
|
|
USER STORAGE |
|
|
Load
Data to User Storage |
LA (LB) |
|
Verify
the Diebold
Table in User Storage |
LC (LD) |
|
Read
Data from User Storage |
LE (LF) |
|
|
|
|
WATCHWORD SUPPORT |
|
|
Verify
a Watchword Response |
FU (FV) |
|
Generate
a Decimal MAC |
LK (LL) |
|
Verify
a Decimal MAC |
LM (LN) |
|
|
|
|
MISCELLANEOUS |
|
|
Cancel
Authorised Activities |
RA (RB) |
|
Set
HSM Response Delay |
LG (LH) |
|
Generate
a Key Check Value |
BU (BV) |
|
Generate
a Key Check Value (Not Double-Length ZMK) |
KA (KB) |
|
Perform
Diagnostics |
NC (ND) |
|
Return
Network Information |
NI (NJ) |
|
HSM
Status |
NO (NP) |
|
Command
Chaining Command |
NK (NL) |
|
|
|
|
AUDITING |
|
|
Translate
Audit Record MAC key |
Q0(Q1) |
|
Retrieve
Audit Record |
Q2(Q3) |
|
Archive
(Print) Audit Record |
Q4(Q5) |
|
Delete
Audit Record |
Q6(Q7) |
|
Audit
Record Verification |
Q8(Q9) |
|
|
|
|
VISA VERIFICATION VALUES |
|
|
Generate
a VISA CVV |
CW (CX) |
|
Verify
a VISA CVV |
CY (CZ) |
|
Verify
Dynamic CVV |
PM (PN) |
|
|
|
|
VISA CASH SYSTEM |
|
|
Generate
and Export a *KML |
DI (DJ) |
|
Import
a *KML |
DK (DL) |
|
Verify
Load Signature S1 and Generate Load Signature S2 |
DM (DN) |
|
Verify
Load Completion Signature S3 |
DO (DP) |
|
Verify
Unload Signature S1 and Generate Unload Signature S2 |
DQ (DR) |
|
Verify
Unload Completion Signature S3 |
DS (DT) |
|
|
|
|
CHIP CARD |
|
|
ARQC
(or TC/AAC) Verification and/or ARPC Generation
|
KQ (KR) |
|
Data
Authentication Code and Dynamic Number Verification |
KS (KT) |
|
Generate
Secure Message with Integrity and optional Confidentiality and PIN Change |
KU (KV) |
|
ARQC
(or TC/ACC Verification and/or ARPC Generation (EMV 4.1 including CCD) |
KW (KX) |
|
Generate
Secure Message with Integrity and optional Confidentiality and PIN Change
(EMV 4.1 and CCD). |
KY (KZ) |
|
Verify
Encrypted Counters (M/Chip 4) |
K0 (K1) |
|
Verify
Truncated Application Cryptogram (MasterCard CAP) |
K2 (K3) |
|
|
|
|
AMERICAN EXPRESS SECURITY CODE |
|
|
Generate
a *CSCK |
RY (RZ) |
|
Export
a *CSCK |
RY (RZ) |
|
Import
a *CSCK |
RY (RZ) |
|
Calculate
Card Security Codes |
RY (RZ) |
|
Verify
Card Security Codes |
RY (RZ) |
|
|
|
|
RACAL TRANSACTION KEY SCHEME |
|
|
|
|
|
Transaction
Request With a PIN (T/AQ Key) |
RI (RJ) |
|
Transaction
Request With a PIN (T/CI Key) |
RU (RV) |
|
Transaction
Request Without a PIN |
RK (RL) |
|
Administration
Request Message |
RM (RN) |
|
Transaction
Response with Auth Para from Card Issuer |
RO (RP) |
|
Generate
Auth Para and Transaction Response |
RQ (RR) |
|
Translate
KEYVAL |
RW (RX) |
|
Confirmation |
RS (RT) |
|
|
|
|
DERIVED UNIQUE KEY PER
TRANSACTION |
|
|
Generate
an Base Derivation Key (*BDK) |
BI (BJ) |
|
Translate
a PIN from *BDK Encryption to Interchange Key Encryption |
CI (CJ) |
|
Translate
a PIN from *BDK Encryption to Interchange Key Encryption (Triple-DES DUKPT) |
G0 (G1) |
|
Verify
a PIN Using the IBM Method |
CK (CL) |
|
Verify
a PIN Using the VISA PVV Method |
CM (CN) |
|
Verify
a PIN Using the Diebold
Method |
CO (CP) |
|
Verify
a PIN Using the Encrypted PIN Method |
CQ (CR) |
|
Translate
a Base Derivation Key from *ZMK to LMK Encryption |
DW (DX) |
|
Translate
a Base Derivation Key from LMK to *ZMK Encryption |
DY (DZ) |
|
Verify
a PIN Using the IBM Method (Triple-DES DUKPT) |
GO (GP) |
|
Verify
a PIN Using the VISA PVV Method (Triple-DES DUKPT) |
GQ (GR) |
|
Verify
a PIN Using the Diebold Method (Triple-DES DUKPT) |
GS (GT) |
|
Verify
a PIN Using the Encrypted PIN Method (Triple-DES DUKPT) |
GU (GV) |
|
Generate/Verify
a MAC using a Triple-DES DUKPT MAC Key |
GW (GX) |
|
|
|
|
AUSTRALIAN TRANSACTION
KEY SCHEME |
|
|
Transaction
Request Without a PIN |
RE (RF) |
|
Transaction
Request With a PIN (T/AQ Key) |
RG (RH) |
|
Transaction
Request With a PIN (T/CI Key) |
RI (RJ) |
|
Transaction
Response With Auth Para Generated by the Acquirer |
RK (RL) |
|
Transaction
Response With Auth Para Generated by the Card Issuer |
RM (RN) |
|
Translate
a PIN from PEK to ZPK Encryption |
RO (RP) |
|
Verify
a Transaction Completion Confirmation Request |
RQ (RR) |
|
Generate
a Transaction Completion Response |
RS (RT) |
|
Verify
a PIN at the Card Issuer Using the IBM Method |
QQ (QR) |
|
Verify
a PIN at the Card Issuer Using the Diebold Method |
QS (QT) |
|
Verify
a PIN at the Card Issuer Using the Visa Method |
QU (QV) |
|
Verify
a PIN at the Card Issuer by Comparison |
QW (QX |
|
Generate
Auth Para at the Card Issuer |
RU (RV) |
|
Message
Authentication Mode Numbers |
MU (MV) |
|
Generate
a MAC on a Binary Message |
MW (MX |
|
|
|
|
RSA FUNCTIONS |
|
|
Generate
an RSA Key Set |
EI (EJ) |
|
Load
a Secret Key |
EK (EL) |
|
Translate
a Secret Key from the Old LMK to a New LMK |
EM (EN) |
|
Generate
a MAC on a Public Key |
EO (EP) |
|
Verify
a MAC on a Public Key |
EQ (ER) |
|
Validate
a Certificate and Generate a MAC on its Public Key |
ES (ET) |
|
Translate
a MAC on a Public Key |
EU (EV) |
|
Generate
a Signature |
EW (EX) |
|
Validate
a Signature |
EY (EZ) |
|
Import
Key under RSA Public Key |
GI (GJ) |
|
Export
Key under RSA Public Key |
GK (GL) |
|
Hash
a Block of Data |
GM (GN) |
|
|
|
|
MASTERCARD ESP |
|
|
Decrypt
R1 and validate
the MACLSAM |
U0(U1) |
|
Compute
HCEP |
U2(U3) |
|
Validate
the S1 MAC (Load
and Unload) |
U4(U5) |
|
Validate
the S1 MAC (Currency
Exchange) |
U6(U7) |
|
Generate
the S2 MAC (Linked
load, declined unlinked load, unload) |
U8(U9) |
|
Generate
the S2 MAC (Currency
Exchange) |
V0(V1) |
|
Generate
the S2 MAC (Approved
Unlinked Load) |
V2(V3) |
|
Validate
the S3 MAC (Currency
Exchange transactions) |
V4(V5) |
|
Validate
the S3 MAC (Load
or Unload transactions) |
V6(V7) |
|
Validate
the H2LSAM |
V8(V9) |
|
Unlinked
Load Transaction Request |
T0(T1) |
|
Release
RLSAM |
T2(T3) |
|
Release
R2LSAM |
T4(T5) |
|
Verify
RCEP |
T6(T7) |
|
Validate
S6 MAC |
W0(W1) |
|
Validate
S6’ MAC |
W2(W3) |
|
Validate
S6’’ MAC |
W4(W5) |
|
Validate
S5’,DLT MAC |
W6(W7) |
|
Validate
S5’,ISS MAC |
W8(W9) |
|
Validate
the S4 MAC–
Old Terminals |
X0(X1) |
|
Validate
the S4 MAC–
New Terminals |
X2(X3) |
|
Validate
the S5 MAC–
Old Terminals |
X4(X5) |
|
Validate
the S5’ MAC
(MAC of the PSAM for a Transaction) – New Terminals |
X6(X7) |
|
Validate
the S5 Variant
MAC (MAC of the PSAM for an Issuer Total) New
Terminals |
X8(X9) |
|
Create
the Acknowledgement MAC – Old Terminals |
Y0(Y1) |
|
Create
the Acknowledgement MAC – New Terminals |
Y2(Y3) |
|
Create
the Update MAC |
Y4(Y5) |
|
Validate
the SADMIN MAC
(Administrative MAC of the PSAM) |
Y6(Y7) |
|
Create
the Merchant Acquirer MAC |
Y8(Y9) |
|
Validate
the Card Issuer MAC |
Z0(Z1) |
|
Validate
a Certification Authority Self-Signed Certificate (MasterCard/Europay) |
JO(JP) |
|
Generate
Issuer RSA Key Set (MasterCard/Europay) |
J0(J1) |
|
Export
Electronic Purse Card Key Set |
R2(R3) |
|
Export
Chip Card Key Set |
R4(R5) |
|
Export
Magnetic Stripe Card Key Set |
R6(R7) |
|
Import
Transport Key Set |
R8(R9) |
|
|
|