Appendix A - Examples
DynaPro Mini| PIN Encryption Device | Programmer’s Manual (Commands)
Page 93 of 128 (
D99875629-43
)
The value of data object
F0
(transaction results) begins with tag
F1
, which
indicate is status data. Its length is a single byte
0x05
, giving the
value
DFDF1A0100
.
The value of data object
F0
(transaction results) continues with tag
F8
(container tag for encryption),
length
0x82010E
, giving a 270 byte value:
DFDF598200F08569A27E2A2A9D7E67A96624D10DBE3F366EC3F31C4072676FEF43213A
F3C76ABE06A6E90F10E1650BE4ECE9CF64E9143129F66B44E8C4A697CA5A0E319D933B
F9BBC52B2DAF8FCC663354E2B0E545A5002F4A0C976E65DD23705AB36ECA78D6A6B992
43F2C2B907A8F1F2A66D5558096D7B1F91F1B6C06BF68841098EEABA502A57A3AA2F13
44C4E405B86C3D64FB93E638D821409493659966A247238109C0E117B669B74A550826
1B8E8AFF3FFE68058C334B383D991EAE3C8F5594FBFB9118860FF67344F37DE54EA5F2
8BFECF8378072A9FAE3A61FEF13254B6C7B2C1D0AF626E5A14F19C025B7CD1EF1456A3
1DDFDF560A9500030000000120039DDFDF570180DFDF580106
The value of data object
F8
begins with tag
DFDF59
(encrypted data primitive), length
0x8200F0
,
giving a 240 byte value containing encrypted data:
8569A27E2A2A9D7E67A96624D10DBE3F366EC3F31C4072676FEF43213AF3C76ABE06A6
E90F10E1650BE4ECE9CF64E9143129F66B44E8C4A697CA5A0E319D933BF9BBC52B2DAF
8FCC663354E2B0E545A5002F4A0C976E65DD23705AB36ECA78D6A6B99243F2C2B907A8
F1F2A66D5558096D7B1F91F1B6C06BF68841098EEABA502A57A3AA2F1344C4E405B86C
3D64FB93E638D821409493659966A247238109C0E117B669B74A5508261B8E8AFF3FFE
68058C334B383D991EAE3C8F5594FBFB9118860FF67344F37DE54EA5F28BFECF837807
2A9FAE3A61FEF13254B6C7B2C1D0AF626E5A14F19C025B7CD1EF1456A31D
This data must be decrypted (described later) to read the remaining TLV data inside it.
After the encrypted data primitive, the value of data object
F8
continues with:
DFDF560A9500030000000120039DDFDF570180DFDF580106
This breaks down into tag
DFDF56
(encrypted transaction data KSN), length
0x0A
giving 10 byte value
9500030000000120039D
, tag
DFDF57
(encrypted transaction data encryption type), length
0x01
,
value
0x80
(DUKPT key), and tag
DFDF58
(number of bytes padding in
DFDF59
), length
0x01
, value
0x06
.
To decrypt the value from data object
DFDF59
above, use the data key variant and the KSN from
DFDF56
above (
9500030000000120039D
) and the ANSI test key to perform 3DES-DUKPT
decryption on the value. For details about the decryption algorithm, see
ANSI X9.24
. In this case, the
value decrypts and parses as:
Tag
Length
Value
82 (EMV Application Interchange Profile)
0002
5800
8E (CVM)
0010
000000000000000042015E0342031F03