Payment security toolkit
Cryptography, keys and payments — in one place.
Free, professional-grade tools for payment developers: DES, AES and RSA, TR-31 key blocks, DUKPT, PIN blocks, ISO 8583 and EMV.
60tools
8categories
35open to you now
Cryptography
5 tools
DES / 3DES
Encrypt and decrypt with single, double and triple-length DES keys in ECB or CBC mode.
AES
AES-128/192/256 encryption and decryption with ECB, CBC, CFB and OFB modes.
RSA & Certificates
RSA keys in PEM, JWK and OpenSSH formats, OAEP encryption, PSS signatures, and CSRs, X.509 certificates and PKCS#12 files.
ECC & Certificates
P-256/384/521, secp256k1, Brainpool and Ed25519 keys, ECDSA/EdDSA signatures, ECDH with HKDF, and EC certificates.
Hash & HMAC
MD5, SHA-1 and SHA-2 digests plus keyed HMAC, with hex or text input.
Key Management
5 tools
Generate Key
Create random DES/3DES/AES keys with KCV and parity, and split or combine key components.
TR-31 Key Block
Wrap and unwrap ANSI X9.143 / TR-31 key blocks (versions A–D, AES and TDES), with optional blocks and published test vectors.
Atalla AKB
Encode and decode Atalla Authenticated Key Blocks for symmetric and RSA keys.
Key Variant
Derive key variants by XOR-ing a key with standard usage modifiers.
Key Parity
Check and set odd or even parity on DES keys and see the KCV.
TR-34
5 tools
TR-34 Flow
Walk through TR-34 binding, two-pass and one-pass key transport, unbind and rebind with real tokens and a simulated KRD. Free account
TR-34 PKI
The CA, KDH and KRD credentials and the CA KDH CRL: the demo set, your TR-34-2019 samples, or a set you generate. Free account
TR-34 Token Builder
Build credential, random number, key, unbind and rebind tokens as the KDH, the CA or the KRD, conformant or deliberately broken. Free account
TR-34 Token Verifier
Decode any TR-34 token, check it rule by rule against TR-34-2019 and decrypt the key block. Free account
TR-34 Conformance
Self-test, KRD and KDH test kits with a valid and a broken token for every rule, and a printable conformance report. Free account
Payment
14 tools
ISO 8583 Message
Parse and build ISO 8583 messages in ASCII, BCD or EBCDIC, with field explanations and EMV field 55 decoding.
ISO 8583 Bitmap
Build and read primary and secondary ISO 8583 bitmaps field by field.
PIN Block
Create, encrypt, decode and translate ISO 9564 PIN blocks, formats 0 to 4.
DUKPT
Derive TDES DUKPT working keys from a BDK and KSN (ANSI X9.24-1).
DUKPT AES
Derive AES DUKPT working keys and protect PIN, MAC and data (ANSI X9.24-3).
MAC Calculator
ANSI X9.9, X9.19 retail MAC and AES-CMAC message authentication codes.
Payment Codes
Response codes, processing codes, POS entry and condition codes, MTI digits and merchant category codes.
Currency Codes
Look up ISO 4217 currency codes by country, name or numeric code.
CVV Calculator
Compute CVV, CVV2 and iCVV from PAN, expiry, service code and CVK.
Test Card Generator
Generate Luhn-valid test PANs with track data and verification values.
Luhn Validator
Validate a card number or compute its check digit, and identify the card network.
Track Parser / Builder
Parse and build magnetic-stripe Track 1 and Track 2 data.
PVV / PIN Offset
Generate and verify Visa PVV and IBM 3624 PIN offsets.
HSM Simulator
Run Atalla, KeyUp and Futurex host commands on a simulated HSM, with ready-made samples for all 82 commands. Free account
EMV
8 tools
TLV Parser / Builder
Parse BER-TLV data into a decoded tree, or build TLV from tag/value rows.
Tag Lookup
Look up an EMV tag's name, format, length and meaning.
Tag Browser
Browse and filter the full EMV tag dictionary.
Tag Decoder
Decode bit-field tags such as TVR, AIP, CVM Results, CTQ and TTQ.
ARQC / ARPC
Derive UDK and session keys, then compute ARQC and verify ARPC.
APDU Decoder
Decode card command / response traces: SELECT, GPO, READ RECORD, GENERATE AC, status words and TLV data.
EMV QR Code
Parse, validate and generate EMVCo merchant-presented QR payloads, with the CRC and a scannable image.
Certificate Inspector
Recover issuer and ICC public keys and verify SDA, DDA and CDA.
EMV Certification
11 tools
EMV Certification
Master EMV certification from Level 1 to Level 3: what each level tests, where to start, and every tool of the group. Supporter
EMV Certification Library
28 articles: Level 1 protocols, the twelve steps of a contact transaction, contactless, ISO 8583 mapping, brand exceptions, test sessions. Supporter
EMV Certification Roadmap
Answer a few questions about your terminal and get the Level 1, 2, 3 and security steps that apply, with what to prepare and study. Supporter
EMV Flow Explorer
The steps of an EMV contact or contactless transaction on a diagram: the path a run took, the branches it did not, and what decided each one. Supporter
EMV Simulator
Run or step a transaction between a virtual card, a terminal kernel and an issuer host, with APDUs, TVR / TSI, ISO 8583 messages and fault injection. Supporter
EMV Test Cases
Our own Level 1, 2 and 3 test cases: run them in the simulator, record a manual run on a real terminal, and print a pre-certification report. Supporter
EMV Trace Analyzer
Paste a terminal's APDU trace and authorisation request for a rule-by-rule review: sequence, data, ODA, CVM, action analysis, cryptograms, field 55. Supporter
EMV Test Cards
Our own test card profiles: records, certificates, CVM lists and keys, with a personalisation check; clone, edit, import and export. Supporter
EMV Terminals & Hosts
Terminal profiles (9F33 / 9F35 / 9F40, TACs, limits, AIDs, CAPKs) and issuer host behaviours for the simulator. Supporter
EMV L1 Protocol Lab
Decode ATRs with acceptance checks, follow APDUs over T=0 and T=1 (chaining, WTX, errors), and watch ISO 14443 activation, collision and removal. Supporter
EMV Self-Assessment
Questions on Levels 1 to 3 with explanations, practice and exam modes, progress per topic, and endless simulator questions. Supporter
Payment Training
7 tools
Payment Training
Master payment development and testing: 34 modules in 8 tracks, role-based paths, lessons, worked examples and endless exercises. Supporter
Payment Training Library
The lessons: DES and AES, key blocks, DUKPT, PIN blocks, CVV, ISO 8583, MACs, EMV, POS and ATM flows, and more. Supporter
Payment Training Practice
Generated exercises with step-by-step solutions: build PIN blocks, parse KSNs, read TR-31 headers, decode bitmaps, compute MACs. Supporter
Transaction Flows
Debit, credit and prepaid transaction types on POS, ATM and e-commerce, and 19 end-to-end flows with their messages, money and what-if branches. Supporter
Transaction Journey Lab
A POS or ATM transaction from the card to the issuer and back, with real HSM simulator commands; inject 29 faults or diagnose a hidden one. Supporter
Payment Test Vectors
Known-answer vectors for DES / AES, KCV, LRC / CRC, TR-31, DUKPT, PIN blocks, PVV, CVV, MACs and EMV: export them and check your own implementation. Supporter
Payment Training Exams
Module, track and path exams with explanations at the end, and a printable training record. Supporter
Utilities
5 tools
Code Converter
Convert between hex, Base64, ASCII, EBCDIC and binary.
XOR / Bitwise
XOR, AND and OR two hex values — handy for key components and masks.
Bit Shift
Shift hex data left or right by any number of bits.
LRC / CRC
LRC with STX/ETX framing, CRC-16 variants, CRC-32 and Adler-32 for terminal and host protocols.
SA Password
Encrypt and decrypt SA password / command URI strings. Free account
About KABC
KABC Payment Tools puts the everyday tools of payment development in one place: DES, AES and RSA, TR-31 and TR-34 key blocks, DUKPT, PIN blocks, ISO 8583, MACs and EMV. Every tool runs in your browser, with training keys and test data, so you can check a value in seconds instead of setting up a lab.
Supporters also get the learning and certification labs:
- Payment Training. 34 modules, from DES and TR-31 to DUKPT, PIN blocks, ISO 8583, EMV and DCC, with live worked examples, endless generated exercises, exams and a printable training record.
- Transaction Journey Lab. Follow a POS or ATM transaction from the card to the issuer through real HSM commands, inject 29 faults and learn to diagnose them from the logs.
- EMV Certification. The Level 1 to 3 simulator, test cases, trace analyzer and protocol lab, to get a terminal or host ready for certification.
Questions or feedback: kabcpay@outlook.com.
Become a supporter
USD 5 a month
or USD 40 a year. Try every supporter feature free for 7 days: no payment, nothing to cancel.
- All 60 tools, the training and the certification labs
- No ads, no tracking of what you type
- Your pass pays for hosting and new features
Just want to help? Donate any amount.