Usage notes

Edit online

The usage notes for CSNBPTR2.

The inbound and outbound PIN encrypting key usage requirements are defined in Table 1:
Table 1. Key usage requirements for PIN encrypting keys

Key usage requirements for PIN encrypting keys.
Input PIN format Output PIN format Authenticated PAN-change allowed Inbound key (key usage) Outbound key (key usage) Authentication key (key usage)
ISO-0 ISO-4 No DES IPINENC (REFORMAT) AES PINPROT (ENCRYPT, ISO-4, REFORMAT) N/A
ISO-1 ISO-4 No DES IPINENC (REFORMAT) AES PINPROT (ENCRYPT, ISO-4, REFORMAT) N/A
ISO-1 ISO-4 No DES IPINENC (REFORMAT) AES PINPROT (ENCRYPT, REFORMAT, ISO-4, RFMT1TO4) N/A
ISO-4 ISO-0 No AES PINPROT (DECRYPT, ISO-4, REFORMAT) DES OPINENC (REFORMAT) N/A
ISO-4 ISO-1 No AES PINPROT (DECRYPT, ISO-4, REFORMAT) DES OPINENC (REFORMAT) N/A
ISO-4 ISO-1 No AES PINPROT (DECRYPT, ISO-4, REFORMAT, RFMT4TO1) DES OPINENC (REFORMAT) N/A
ISO-4 ISO-4 No AES PINPROT (DECRYPT, ISO-4, PINXLATE) AES PINPROT (ENCRYPT, ISO-4, PINXLATE) N/A
ISO-4 ISO-4 Yes AES PINPROT (DECRYPT, ISO-4, PINXLATE) AES PINPROT (ENCRYPT, ISO-4, PINXLATE) AES MAC (CMAC, VERIFY) or (CMAC, VERIFY, PTR2AUTH)
Table 2. Valid Encrypted PIN Translate2 DUKPT keyword combinations

Valid Encrypted PIN Translate2 DUKPT keyword combinations.
DUKPT keyword combination Input PIN encrypting key Output PIN encrypting key
UKPTIPIN ADUKPTOP Single DES DUKPT AES DUKPT
DUKPT-IP ADUKPTOP Triple DES DUKPT AES DUKPT
ADUKPTIP UKPTOPIN AES DUKPT Single DES DUKPT
ADUKPTIP DUKPT-OP AES DUKPT Triple DES DUKPT
UKPTBOTH Single DES DUKPT Single DES DUKPT
DUKPT-BH Triple DES DUKPT Triple DES DUKPT
ADUKPTBH AES DUKPT AES DUKPT
UKPTIPIN Single DES DUKPT Static
UKPTOPIN Static Single DES DUKPT
DUKPT-IP Triple DES DUKPT Static
DUKPT-OP Static Triple DES DUKPT
ADUKPTIP AES DUKPT Static
ADUKPTOP Static AES DUKPT