Christmas is coming!

To celebrate the new year and thank for the support from all our dear customers, Christmas promotional activity is being held in JavaCardOS online store.

During the event, you can enjoy many promotional activities - High Discount on JavaCardOS products,Lucky Draw,Double forum Points.

Come to choose your own Christmas gift and try your luck now!

ARQC generation algorithm: Does iCVV play role ?

Algorithm School

Moderator: UNKNwYSHSA

Mircea
Posts: 1
Joined: Sat May 20, 2017 12:55 pm
Points: 18
Contact:

ARQC generation algorithm: Does iCVV play role ?

Postby Mircea » Sat May 20, 2017 1:26 pm

I need a theoretical answer not a real life one.
From specifications and security papers i read i come to conclusion that if you take 2 new visa bank cards with ATC = 0 and CDOL data all the same and UN from terminal the same number, will both cards generate the same ARQC in this case ? Does iCVV and Card 16 digits play any role in generation algorithm ?

User avatar
UNKNwYSHSA
Posts: 628
Joined: Thu May 21, 2015 4:05 am
Points: 2971
Contact:

Re: ARQC generation algorithm: Does iCVV play role ?

Postby UNKNwYSHSA » Tue May 23, 2017 6:09 am

The both cards generates different result, they uses different session key. Refer to the specification EMV Book 4.3 2 Security and Key Management:
Session keys KS are derived from unique Master Keys KM using diversification
data R as follows
KS := F(KM)[R]
To prevent replay attacks, the diversification data R should have a high
probability of being different for each session key derivation.

For the rules, please see the specification: EMV x.x Book 2 Security and Key Management.
sense and simplicity


Return to “Algorithm School”

Who is online

Users browsing this forum: No registered users and 2 guests

JavaCard OS : Disclaimer