Search
38 articles found
HSM & Security
TAK stands for Terminal Authentication Key. It is the data encryption key used to generate and verify a Message Authentication Code (MAC) for data communication between a terminal and the acquirer within a local network.
HSM & Security
ZPK, also known as the PIN Protection Key, is a data encryption key that is distributed automatically and used to encrypt PINs. It is also referred to as the 'Working Key'. This key allows PIN information to be carried securely across the network.
ISO 8583
F124 (Private Additional Data) contains additional information specific to the transaction, such as Card Update Failure Code and Status, cardholder name in money transfers, and keys in network management messages.
Payment Systems
In payment or cash withdrawal transactions, the TR QR Code is generated by the POS or ATM. The card issuing bank must build its systems to read and act on this code. Errors usually stem from mishandling the long and short QR code flows, which are explained here.
HSM & Security
White Box Cryptography (WBC) is an important technology used to minimize security risks for open devices such as smartphones. It is a new technique against attacks targeting white-box attack environments.
HSM & Security
Below are the properties and descriptions of the DES and AES keys used for encryption: DES (Data Encryption Standard) and AES (Advanced Encryption Standard) are both symmetric block ciphers. DES is a symmetric block cipher with a 56-bit key length...
HSM & Security
LMK stands for Local Master Key. The Local Master Key (LMK) is the HSM's master key, and all other keys used by the institution are secured under this key. As transaction volume increases, banks often use multiple HSMs to reduce the load on each device.
HSM & Security
RSA, first used by Rivest, Shamir and Adleman, is a security algorithm used in digital cryptography. RSA differs from older symmetric algorithms because it enables digital signing and advanced encryption for e-commerce systems and high-profile institutions.
HSM & Security
ZMK is short for Zone Master Key. It is the key used to transport a key from one environment to another. In short, we can say ZMK is the main transport vehicle. The key that two parties use to encrypt and exchange new ZPKs is the ZMK.
Credit Card
CVK (Card Verification Key) is the key information used to generate and verify CVV/CVC values, confirming their validity. It is kept as a pair of keys, CVK A and CVK B, encrypted under TMK, ZMK or LMK.
Merchant & POS
PIN Transaction Security (PTS) verifies that card data and PIN information are used for a payment transaction. It is a set of modular evaluation requirements managed by the PCI Security Standards Council for PIN-accepting terminals.
ISO 8583
F23 - CARD SEQUENCE NUMBER: Information used to distinguish cards sharing the same card number. For example, the Card Sequence Number is incremented by 1 when a card is renewed. In an authorization transaction, if the F22 value is '05x'...