Announce two new product: SmartCard Reader Rockey200 and USB2.0 Extension Cable

ROCKEY 200 is a handy and portable USB Smart Card reader that can perform read/write operations on any ISO 7816-1/2/3/4 smart cards which are compatible with protocol T=0 and T=1.

USB2.0 Extension Cable With high speed USB 2.0 devices such as USB token ,USB Card Reader and so on.

Come to try it now!

ARQC generation algorithm: Does iCVV play role ?

Algorithm School

Moderator: UNKNwYSHSA

Mircea
Posts: 1
Joined: Sat May 20, 2017 12:55 pm
Points: 18
Contact:

ARQC generation algorithm: Does iCVV play role ?

Postby Mircea » Sat May 20, 2017 1:26 pm

I need a theoretical answer not a real life one.
From specifications and security papers i read i come to conclusion that if you take 2 new visa bank cards with ATC = 0 and CDOL data all the same and UN from terminal the same number, will both cards generate the same ARQC in this case ? Does iCVV and Card 16 digits play any role in generation algorithm ?

User avatar
UNKNwYSHSA
Posts: 628
Joined: Thu May 21, 2015 4:05 am
Points: 2979
Contact:

Re: ARQC generation algorithm: Does iCVV play role ?

Postby UNKNwYSHSA » Tue May 23, 2017 6:09 am

The both cards generates different result, they uses different session key. Refer to the specification EMV Book 4.3 2 Security and Key Management:
Session keys KS are derived from unique Master Keys KM using diversification
data R as follows
KS := F(KM)[R]
To prevent replay attacks, the diversification data R should have a high
probability of being different for each session key derivation.

For the rules, please see the specification: EMV x.x Book 2 Security and Key Management.
sense and simplicity


Return to “Algorithm School”

Who is online

Users browsing this forum: No registered users and 2 guests

JavaCard OS : Disclaimer