Appendix D - EMV Message Formats (EMV Only)
eDynamo| Secure Card Reader Authenticator | Programmer’s Manual (COMMANDS)
Page 217 of 245 (
D998200115-17
)
D.1.2
Security Level 3
When the device is set to
(encrypting), the ARQC Message TLV data object contains
the following:
F9<len> /* container for MAC structure and generic data */
DFDF54(MAC KSN)<len><val>
DFDF55(MAC Encryption Type)<len><val>
DFDF25(IFD Serial Number)<len><val>
FA<len>/* container for generic data */
70<len> /*container for ARQC */
DFDF53<len><value> /*fallback indicator */
5F20<len><value> /*cardholder name */
5F30<len><value> /*service code */
DFDF4D<len><value> /* Masked T2 PICC/ICC Data */
DFDF52<len><value> /* card type */
F8<len> /*container tag for encryption */
DFDF59(Encrypted Data
Primitive)<len><Encrypted Data val (Decrypt data to read tags)>
DFDF56(Encrypted Transaction Data
KSN)<len><val>
DFDF57(Encrypted Transaction Data
Encryption Type)<val>
DFDF58(# of bytes of padding in
DFDF59)<len><val>
(Buffer if any to be a multiple of 8 bytes)
CBC-MAC (4 bytes reserved, not calculated)
The value inside tag DFDF4D is fully described in section
The device encrypts the Value inside data container DFDF59 using the
Data Encryption, request or
both ways
variant [or other variant depending on
Property 0x67 - EMV Data Encryption Variant
] of the current DUKPT Key used in the relevant transaction. As a requirement for using the
DUKPT TDES encryption algorithm, the device pads it so the length of its value is a multiple of 8 bytes.
The device uses tag DFDF58 to report how many bytes of tag DFDF59 are padding. After the host
decrypts it, DFDF59 contains a list of TLV data objects defined by terminal setting DFDF02 or DFDF08
is card type is contactless-MSD. For example:
FC<len>/* container for encrypted generic data *
<tags defined by DFDF02 or DFDF08>
F4<len>/* container tag for encrypted MSR
data */
DFDF36 <EncT1status><len><val>
DFDF37 <EncT1data><len><val>
DFDF38 <EncT2status><len><val>
DFDF39 <EncT2data><len><val>
DFDF3A <EncT3status><len><val>
DFDF3B <EncT3data><len><val>
DFDF3C <Encrypted Magneprint
Data><len><val>
