Examples of org.jpos.security.EncryptedPIN

org.jpos.security.EncryptedPIN

The PIN (Personal Identification Number), is used to authenticate card holders. A user enters his/her PIN on the pin-pad (also called pin entry device) of a terminal (whether ATM or POS). The terminal forms the PIN Block, which is a mix of the PIN and the account number.
In a typical environment, the PIN Block (not the PIN) gets encrypted and sent to the acquirer. This Encrypted PIN Block is the typical content of the PIN Data ISO Field (Field 52). This class represents an encrypted PIN, no matter by whom it is encrypted. Typically a PIN is encrypted under one of these three:
1- Under a terminal PIN key (like TPK or DUKPT)
2- Under an Interchange PIN key (like ZPK)
3- Under the the security module itself (i.e. under LMK)
This class knows nothing about, who encrypted it.

This class represents an encrypted PIN using:
1- The PIN Block (encrypted)
2- The account number (the 12 right-most digits of the account number excluding the check digit)
3- The PIN Block Format

The PIN Block Format specifies how the clear pin (as entered by the card holder) and the account number get mixed to form the PIN Block.

@author Hani Samuel Kirollos @version $Revision$ $Date$ @see SMAdapter

        String accountNo = accountNoA;
        String accntSeqNo = accountNoA_CSN;
        byte[] apdu = apdu01;
        byte[] atc = atc01;
        byte[] arqc = arqc01;
        EncryptedPIN pin  =  pinUnderZPK;
        apdu = ISOUtil.concat(apdu, atc);
        apdu = ISOUtil.concat(apdu, arqc);
        EncryptedPIN expectdPIN = new EncryptedPIN("F473D25D9B478970", SMAdapter.FORMAT34, accountNo);
        Pair<EncryptedPIN, byte[]> result = jcesecmod.translatePINGenerateSM_MAC(
                         MKDMethod.OPTION_A, SKDMethod.MCHIP, null
                        ,imksmi, accountNo, accntSeqNo, atc, arqc, apdu
                        ,null, pin, zpk, imksmc, null, SMAdapter.FORMAT34);
        assertArrayEquals(expectdPIN.getPINBlock(), result.getValue0().getPINBlock());
        assertArrayEquals(ISOUtil.hex2byte("831B043B4A314FD2"), result.getValue1());
    }

View Full Code Here

        String accountNo = accountNoA;
        String accntSeqNo = accountNoA_CSN;
        byte[] apdu = apdu01;
        byte[] atc = atc01;
        byte[] arqc = arqc01;
        EncryptedPIN pin  =  pinUnderZPK;
        apdu = ISOUtil.concat(apdu, atc);
        apdu = ISOUtil.concat(apdu, arqc);
        EncryptedPIN expectdPIN = new EncryptedPIN("E60663E4B11CDB2DE4667CC9433384B4", SMAdapter.FORMAT41, accountNo);
        Pair<EncryptedPIN, byte[]> result = jcesecmod.translatePINGenerateSM_MAC(
                         MKDMethod.OPTION_A, SKDMethod.EMV_CSKD, null
                        ,imksmi, accountNo, accntSeqNo, atc, arqc, apdu
                        ,null, pin, zpk, imksmc, imkac, SMAdapter.FORMAT41);
        assertArrayEquals(expectdPIN.getPINBlock(), result.getValue0().getPINBlock());
        assertArrayEquals(ISOUtil.hex2byte("0405DB9BFB25BE6F"), result.getValue1());
    }

View Full Code Here

        String accountNo = accountNoA;
        String accntSeqNo = accountNoA_CSN;
        byte[] apdu = apdu01;
        byte[] atc = atc01;
        byte[] arqc = arqc01;
        EncryptedPIN pin  =  pinUnderZPK;
        apdu = ISOUtil.concat(apdu, atc);
        apdu = ISOUtil.concat(apdu, arqc);
        EncryptedPIN expectdPIN = new EncryptedPIN("158C4C2E67041975DEB907E2E57EC85D", SMAdapter.FORMAT41, accountNo);
        Pair<EncryptedPIN, byte[]> result = jcesecmod.translatePINGenerateSM_MAC(
                         MKDMethod.OPTION_A, SKDMethod.EMV_CSKD, PaddingMethod.VSDC
                        ,imksmi, accountNo, accntSeqNo, atc, arqc, apdu
                        ,null, pin, zpk, imksmc, imkac, SMAdapter.FORMAT41);
        assertArrayEquals(expectdPIN.getPINBlock(), result.getValue0().getPINBlock());
        assertArrayEquals(ISOUtil.hex2byte("7DE6117DEB56D37F"), result.getValue1());
    }

View Full Code Here

        String accountNo = accountNoA;
        String accntSeqNo = accountNoA_CSN;
        byte[] apdu = apdu01;
        byte[] atc = atc01;
        byte[] arqc = arqc01;
        EncryptedPIN pin  =  pinUnderZPK;
        apdu = ISOUtil.concat(apdu, atc);
        apdu = ISOUtil.concat(apdu, arqc);
        EncryptedPIN expectdPIN = new EncryptedPIN("F473D25D9B478970E72651C08FE487EF", SMAdapter.FORMAT34, accountNo);
        Pair<EncryptedPIN, byte[]> result = jcesecmod.translatePINGenerateSM_MAC(
                         MKDMethod.OPTION_A, SKDMethod.EMV_CSKD, null
                        ,imksmi, accountNo, accntSeqNo, atc, arqc, apdu
                        ,null, pin, zpk, imksmc, null, SMAdapter.FORMAT34);
        assertArrayEquals(expectdPIN.getPINBlock(), result.getValue0().getPINBlock());
        assertArrayEquals(ISOUtil.hex2byte("299E98C2B5A38B27"), result.getValue1());
    }

View Full Code Here

        String accountNo = accountNoA;
        String accntSeqNo = accountNoA_CSN;
        byte[] apdu = apdu01;
        byte[] atc = atc01;
        byte[] arqc = arqc01;
        EncryptedPIN pin  =  pinUnderZPK;
        apdu = ISOUtil.concat(apdu, atc);
        apdu = ISOUtil.concat(apdu, arqc);
        EncryptedPIN expectdPIN = new EncryptedPIN("EF0F091EDA14326440C47C0F7C572473", SMAdapter.FORMAT41, accountNo);
        Pair<EncryptedPIN, byte[]> result = jcesecmod.translatePINGenerateSM_MAC(
                         MKDMethod.OPTION_A, SKDMethod.VSDC, null
                        ,imksmi, accountNo, accntSeqNo, atc, arqc, apdu
                        ,null, pin, zpk, imksmc, imkac, SMAdapter.FORMAT41);
        assertArrayEquals(expectdPIN.getPINBlock(), result.getValue0().getPINBlock());
        assertArrayEquals(ISOUtil.hex2byte("9F1B829D179E55C2"), result.getValue1());
    }

View Full Code Here

        String accountNo = accountNoA;
        String accntSeqNo = accountNoA_CSN;
        byte[] apdu = apdu01;
        byte[] atc = atc01;
        byte[] arqc = arqc01;
        EncryptedPIN oldpin= new EncryptedPIN("33BADC0F07C6FB29", SMAdapter.FORMAT01, accountNo);
        EncryptedPIN pin   = pinUnderZPK;
        apdu = ISOUtil.concat(apdu, atc);
        apdu = ISOUtil.concat(apdu, arqc);
        EncryptedPIN expectdPIN = new EncryptedPIN("74253653C81CE99140C47C0F7C572473", SMAdapter.FORMAT42, accountNo);
        Pair<EncryptedPIN, byte[]> result = jcesecmod.translatePINGenerateSM_MAC(
                         MKDMethod.OPTION_A, SKDMethod.VSDC, null
                        ,imksmi, accountNo, accntSeqNo, atc, arqc, apdu
                        ,oldpin, pin, zpk, imksmc, imkac, SMAdapter.FORMAT42);
        assertArrayEquals(expectdPIN.getPINBlock(), result.getValue0().getPINBlock());
        assertArrayEquals(ISOUtil.hex2byte("6F403E51DCE1E4A6"), result.getValue1());
    }

View Full Code Here

    private void test_DUKPT(String keyName, KeySerialNumber ksn, byte[] pinUnderDukpt, String pan,boolean tdes)
            throws Exception
    {
        LogEvent evt = log.createInfo("test_DUKPT " + ksn);
        evt.addMessage(ksn);
        EncryptedPIN pin = new EncryptedPIN(
                pinUnderDukpt, SMAdapter.FORMAT01, pan
        );
        SecureDESKey bdk = (SecureDESKey) ks.getKey(keyName);
        evt.addMessage(pin);
        evt.addMessage(ksn);
        evt.addMessage(bdk);


        EncryptedPIN pinUnderLMK = sm.importPIN(pin, ksn, bdk,tdes);
        evt.addMessage(pinUnderLMK);
        evt.addMessage(
                "<decrypted-pin>" + sm.decryptPIN(pinUnderLMK) + "</decrypted-pin>"
        );
        Logger.log(evt);

View Full Code Here

0 1

TOP

Related Classes of org.jpos.security.EncryptedPIN

org.jpos.security.jceadapter.DUKPTTest

org.jpos.security.jceadapter.JCESecurityModuleTest

java.security.InvalidParameterException

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.