K7 DUKPT AES

Needs: Supporter

Lesson K7: AES DUKPT: derivation data, key types and usages, the 32-bit counter and the move from TDES DUKPT.

This is a supporter feature. Create a free account, then try every supporter feature free for 7 days.

Sign in

Create a free account

See plans

The opening of the lesson

Why it matters

TDES is being retired, and DUKPT must move with it. AES DUKPT (ANSI X9.24-3) keeps the idea of a unique key per transaction, but uses AES throughout and binds each key's purpose into its derivation. New PIN pads, SoftPOS solutions and P2PE devices use it, and hosts must support both versions for years.

In the full lesson

The concept
Step by step
In the real world
Common mistakes
What to test

What module K7 covers →

The rest of the lesson opens with a supporter pass, which you can try free for 7 days.