In order to thank you for all members' support of our website, we are holding new events - Getting Free Samples by Paying Freight only.
Want to get free samples? Please check this post for more details.

ARQC generation algorithm: Does iCVV play role ?

Algorithm School

Moderator: UNKNwYSHSA

Mircea
Posts: 1
Joined: Sat May 20, 2017 12:55 pm
Points :18
Contact:

ARQC generation algorithm: Does iCVV play role ?

Post by Mircea » Sat May 20, 2017 1:26 pm

I need a theoretical answer not a real life one.
From specifications and security papers i read i come to conclusion that if you take 2 new visa bank cards with ATC = 0 and CDOL data all the same and UN from terminal the same number, will both cards generate the same ARQC in this case ? Does iCVV and Card 16 digits play any role in generation algorithm ?

User avatar
UNKNwYSHSA
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3023
Contact:

Re: ARQC generation algorithm: Does iCVV play role ?

Post by UNKNwYSHSA » Tue May 23, 2017 6:09 am

The both cards generates different result, they uses different session key. Refer to the specification EMV Book 4.3 2 Security and Key Management:
Session keys KS are derived from unique Master Keys KM using diversification
data R as follows
KS := F(KM)[R]
To prevent replay attacks, the diversification data R should have a high
probability of being different for each session key derivation.

For the rules, please see the specification: EMV x.x Book 2 Security and Key Management.
sense and simplicity

Post Reply Previous topicNext topic

Who is online

Users browsing this forum: No registered users and 2 guests

JavaCard OS : Disclaimer