Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

If you purchased Amadis's Kernels in source code, you can skip this section since you can apply these two techniques without problem by yourself .

Name Mangling is a technique that can only be applied on the source code while Code Flow Flattening can only be applied at compilation. If you purchased Amadis's Kernels in object code you will not be able to implement them.

...

The MPoC certification requires a lot more security from the final product than just Name Mangling and Code Flow Flattening on the kernels. It is your responsibility to secure the entire solution and integrate the kernels inside it. Relying only on the two techniques we applied to get certified will not be enough.

These two techniques are required from you on all the product (not just the kernels) for MPoC specification require these two techniques (Code Flow Flattening & Code Mangling) to be applied on all software (not only the EMV level 2 stack & kernels) to obtain the MPoC certification. Even if we apply them on the EMV level 2 stack & kernels on your behalf, you still need It remains your responsibility to implement them on the rest of the productSoftware..

We didn't apply more security techniques on the kernels because it will make the integration harder for you. Security and protection techniques tend to conflict with one another and create issues that are hard to solve. If we did so, it will end up costing you time and money. By only applying Name Mangling and Code Flow Flattening we ensure that you have MPoC compliant kernels that can be easily integrated inside your product and will not interfere with your MPoC security.