Ingenico group Move/3500 Installation Guide

ICO-OPE-04848-EN-V11
Move/3500 PCI PTS Security Policy
Public
Ingenico document - Please check document validity before using
16/16
Key Name Purpose / Usage Algorithm
Size
(Bits)
Storage
Form
factor
loaded to
device In
Number
of
available
Key Slots
DUKPT2009 – MAC Key
MAC calculation /
verification
TDES 112
Secure
unit
Derived
originally
from IPEK
42
DUKPT2017 – IPEK Initial DUKPT Keys
AES
AES
AES
128
192
256
Secure
unit
Enciphere
d under
K_Key
1
DUKPT2017 – Pin Key Pin encryption
TDES
TDES
AES
AES
AES
112
168
128
192
256
Secure
unit
Derived
originally
from IPEK
32
DUKPT2017 – Data Key Data encryption
TDES
TDES
AES
AES
AES
112
168
128
192
256
Secure
unit
Derived
originally
from IPEK
32
DUKPT2017 – MAC Key
MAC calculation /
verification
TDES
TDES
AES
AES
AES
112
168
128
192
256
Secure
unit
Derived
originally
from IPEK
32
DUKPT2017 – HMAC
Key
HMAC calculation /
verification
HMAC
HMAC
HMAC
128
192
256
Secure
unit
Derived
originally
from IPEK
32
EMV_PK_MAC Key
MAC Generation and
verification of EMV PK
TDES 128
Secure
unit
Randoml
y
generate
d
31
EMV_PK_CA Key
CA public keys for
certificate verification
(EMV_Issuer_PK)
RSA 2048
Secure
unit
Received
from
bank host
1
EMV_Issuer_PK Key
Issuer public key for
certificate verification
(EMV_ICC_PK and
PIN_Cipher_PK ) and
EMV Data
authentication (SDA
case)
RSA 2048
Secure
unit
Received
from
CARD
1
EMV_ICC_PK Key
EMV Data
authentication (DDA
and CDA cases) and
PIN Encryption
RSA 2048
Secure
unit
Received
from
CARD
1
PIN_Cipher_PK Key Offline PIN Encryption RSA 2048
Secure
unit
Received
from
CARD
1

Ingenico group Move/3500 Specifications

General

Brand	Ingenico group
Model	Move/3500
Category	Payment Terminal
Language	English