Page Comparison

RSA Key ID length

2

Length of the RSA key ID (MSB)

RSA Key ID

var

RSA key ID used for the session key encryption

Encrypted KEK length

2

Length of the encrypted KEK block (MSB - should be 512)

Encrypted KEK

512

Encrypted KEK block:

• encrypted with RSA key (RSA/ECB/OAEPWithSHA-256AndMGF1Padding)

• cleartext contains the KEK (16 bytes) and the IV (16 bytes)

Encrypted card data length

2

Length of the encrypted card data block (MSB )

Encrypted sensitive card data

var

Encrypted sensitive card data:

• encrypted with KEK key (AES/CBCECB/NoPadding)

• cleartext which can contain the following tags (as TLV)

  • ‘56’ (Track1)

  • ‘57’ (Track2)

  • ‘5A’ (PAN)

  • ‘90’ (Issuer Public Key Certificate)

  • ‘9F46’ (ICC Public Key Certificate)

  • ‘9F6B’ (Track2 data - MasterCard)

HMAC Key ID length

2

Length of the HMAC key ID (MSB)

HMAC Key ID

var

HMAC key ID used for the checksum calculation

HMAC length

2

Length of the HMAC checksum (MSB - should be 32)

HMAC

32

AES-CBC-256 checksum