GenerateCardData VerifyCardData GeneratePinData (for VISA/ABA schemes)GeneratePinData (for IBM3624)VerifyPinData (for VISA/ABA schemes)VerifyPinData (for IBM3624)Decrypt Data Encrypt Data Translate Pin Data Generate/Verify MAC GenerateMacEmvPinChange VerifyAuthRequestCryptogram Import/Export Key Unused key types

Valid keys for cryptographic operations

Certain keys can only be used for certain operations. Additionally, some operations may limit the key modes of use for keys. Please see the following table for allowed combinations.

Note

Certain combinations, although permitted, may create unusable situations such as generating CVV codes (generate) but then unable to verify them (verify).

GenerateCardData

API Endpoint	Cryptographic Operation or Algorithm	Allowed Key Usage	Allowed Key Algorithm	Allowed combination of key modes of use
GenerateCardData	AMEX_CARD_SECURITY_CODE_VERSION_1 AMEX_CARD_SECURITY_CODE_VERSION_2	TR31_C0_CARD_VERIFICATION_KEY	TDES_2KEY TDES_3KEY	{ Generate = true },{ Generate = true, Verify = true }
GenerateCardData	CARD_VERIFICATION_VALUE_1 CARD_VERIFICATION_VALUE_2	TR31_C0_CARD_VERIFICATION_KEY	TDES_2KEY	{ Generate = true },{ Generate = true, Verify = true }
GenerateCardData	CARDHOLDER_AUTHENTICATION_VERIFICATION_VALUE	TR31_E6_EMV_MKEY_OTHER	TDES_2KEY	{ DeriveKey = true }
GenerateCardData	DYNAMIC_CARD_VERIFICATION_CODE	TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS	TDES_2KEY	{ DeriveKey = true }
GenerateCardData	DYNAMIC_CARD_VERIFICATION_VALUE	TR31_E6_EMV_MKEY_OTHER	TDES_2KEY	{ DeriveKey = true }

VerifyCardData

Cryptographic Operation or Algorithm	Allowed Key Usage	Allowed Key Algorithm	Allowed combination of key modes of use
AMEX_CARD_SECURITY_CODE_VERSION_1 AMEX_CARD_SECURITY_CODE_VERSION_2	TR31_C0_CARD_VERIFICATION_KEY	TDES_2KEY TDES_3KEY	{ Generate = true },{ Generate = true, Verify = true }
CARD_VERIFICATION_VALUE_1 CARD_VERIFICATION_VALUE_2	TR31_C0_CARD_VERIFICATION_KEY	TDES_2KEY	{ Generate = true },{ Generate = true, Verify = true }
CARDHOLDER_AUTHENTICATION_VERIFICATION_VALUE	TR31_E6_EMV_MKEY_OTHER	TDES_2KEY	{ DeriveKey = true }
DYNAMIC_CARD_VERIFICATION_CODE	TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS	TDES_2KEY	{ DeriveKey = true }
DYNAMIC_CARD_VERIFICATION_VALUE	TR31_E6_EMV_MKEY_OTHER	TDES_2KEY	{ DeriveKey = true }

GeneratePinData (for VISA/ABA schemes)

VISA_PIN or VISA_PIN_VERIFICATION_VALUE

Key Type	Allowed Key Usage	Allowed Key Algorithm	Allowed combination of key modes of use
PIN Encryption Key	TR31_P0_PIN_ENCRYPTION_KEY	TDES_2KEY TDES_3KEY	{ Encrypt = true, Wrap = true } { Encrypt = true, Decrypt = true, Wrap = true, Unwrap = true } { NoRestrictions = true }
PIN Generation Key	TR31_V2_VISA_PIN_VERIFICATION_KEY	TDES_2KEY TDES_3KEY	{ Generate = true } { Generate = true, Verify = true }

GeneratePinData (for `IBM3624`)

IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)

Key Type	Allowed Key Usage	Allowed Key Algorithm	Allowed combination of key modes of use
PIN Encryption Key	TR31_P0_PIN_ENCRYPTION_KEY	TDES_2KEY TDES_3KEY	For IBM3624_NATURAL_PIN, IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET { Encrypt = true, Wrap = true } { Encrypt = true, Decrypt = true, Wrap = true, Unwrap = true } { NoRestrictions = true } For IBM3624_PIN_OFFSET { Encrypt = true, Unwrap = true } { Encrypt = true, Decrypt = true, Wrap = true, Unwrap = true } { NoRestrictions = true }
PIN Generation Key	TR31_V1_IBM3624_PIN_VERIFICATION_KEY	TDES_3KEY	{ Generate = true } { Generate = true, Verify = true }

Key Type

Allowed Key Usage

Allowed Key Algorithm

Allowed combination of key modes of use

PIN Encryption Key

TR31_P0_PIN_ENCRYPTION_KEY

TDES_2KEY
TDES_3KEY

For IBM3624_NATURAL_PIN, IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET

{ Encrypt = true, Wrap = true }
{ Encrypt = true, Decrypt = true, Wrap = true, Unwrap = true }
{ NoRestrictions = true }

For IBM3624_PIN_OFFSET

{ Encrypt = true, Unwrap = true }
{ Encrypt = true, Decrypt = true, Wrap = true, Unwrap = true }
{ NoRestrictions = true }

PIN Generation Key

TR31_V1_IBM3624_PIN_VERIFICATION_KEY

TDES_3KEY

{ Generate = true }
{ Generate = true, Verify = true }

VerifyPinData (for VISA/ABA schemes)

VISA_PIN

Key Type	Allowed Key Usage	Allowed Key Algorithm	Allowed combination of key modes of use
PIN Encryption Key	TR31_P0_PIN_ENCRYPTION_KEY	TDES_2KEY TDES_3KEY	{ Decrypt = true, Unwrap = true } { Encrypt = true, Decrypt = true, Wrap = true, Unwrap = true } { NoRestrictions = true }
PIN Generation Key	TR31_V2_VISA_PIN_VERIFICATION_KEY	TDES_2KEY TDES_3KEY	{ Verify = true } { Generate = true, Verify = true }

VerifyPinData (for `IBM3624`)

IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)

Key Type	Allowed Key Usage	Allowed Key Algorithm	Allowed combination of key modes of use
PIN Encryption Key