IPP MS AND DUKPT COMMUNICATIONS PACKETS
IPP7
284 M
X
800 SERIES PROGRAMMERS GUIDE
Rules for Loading
the Master Key
(MS only)
This section provides details on IPP7 key attributes, key version, and key length.
On erasure, the master key usage attribute is set to 0, the version is set to 0, and
the length is set to 1DES.
The register listed in Table 27 applies to 1DES master key, 3DES master key
(GISKE), and KLK (GISKE). The original GISKE (ASCII-hex) key usage attribute
value is saved in RAM (2 bytes).
The key version of an incoming GISKE format key must be greater than or equal
to the version set in the key attribute table for all keys (that is1DES master key,
3DES master key GISKE, and KLK GISKE). The rules for the GISKE key version
are:
• when the version is greater than or equal to the current key, OK is returned
and the IPP updates the new key
NOTE
Each key has its own key attribute register, key version register, and key length
register.
Table 27 Key Attributes
Key
Attribute
Register
Value Definition
[XX] AN ANY: Key is available in IPP, but the Key was not
loaded using GISKE format.
D0 Data encryption
I0 IV
T0 Control vector
K0 Key encryption or wrapping
G0 MAC generation
M0 MAC verification
P0 PIN encryption
V0 PIN verification
C0 CVK: card verification key
B0 BDK: base derivation key [A]
00 ISO 9797-1, MAC algorithm 1– 56 bits
10 ISO 9797-1, MAC algorithm 1–112 bits
20 ISO 9797-1, MAC algorithm 2–112 bits
30 ISO 9797-1, MAC algorithm 3–112 bits
40 ISO 9797-1, MAC algorithm 4–112 bits
50 ISO 9797-1, MAC algorithm 5–56 bits
60 ISO 9797-1, MAC algorithm 5–112 bits