FPE Encipher (CSNBFPEE)

Edit online

The FPE Encipher verb is used to encrypt payment card data for the Visa Data Secure Platform (VDSP) processing.

This service supports two options:

  • The standard encryption option.
  • The Visa Format Preserving Encryption (VFPE) option.

To use this service, you must specify the following:

  • The processing method Visa Data Secure Platform (Visa DSP).
  • The key management method, either STATIC or DUKPT.
  • The algorithm, which is limited to TDES.
  • The mode, either CBC (for the standard encryption option) or Visa Format Preserving Encryption (VFPE).
  • The plaintext to be encrypted.
  • The character set of each field to be encrypted using rule-array keywords.
  • The base derivation key and either the key serial number for DES-DUKPT or the AES-DUKPT derivation data for AES-DUKPT, or a double-length TDES key if STATIC key management is used.
  • A compliance or non-compliance indicator for the check digit of the PAN to be processed.

The service returns the encrypted fields and optionally, the DUKPT PIN key, if the DUKPT key management is selected and the PINKEY rule is specified.

Note: This verb supports PCI-HSM 2016 compliant-tagged key tokens.