C1 DES, 3DES and AES

Needs: Supporter

Lesson C1: Block ciphers, two- and three-key TDES, modes, IVs and padding, and where payments use each.

This is a supporter feature. Create a free account, then try every supporter feature free for 7 days.

Sign in Create a free account See plans

The opening of the lesson

Why it matters

Almost every secret in a card payment is protected by a block cipher:

  • the PIN block on its way from the PIN pad to the issuer;
  • the working keys exchanged between hosts;
  • the track data some terminals encrypt;
  • the session keys of an EMV card.

You will call these ciphers through an HSM or a library, but you have to know which one, with which key length, in which mode and with which padding. When those four choices differ between two systems, nothing works and nothing tells you why.

In the full lesson

  1. The concept
  2. Step by step: CBC encryption
  3. In the real world
  4. Common mistakes
  5. What to test

What module C1 covers →

The rest of the lesson opens with a supporter pass, which you can try free for 7 days.
An unhandled error has occurred. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.