PEK Derivation

Input Key Designation:

BDK

IPEK

BDK/IPEK: [32]

KSN: [20]

DUKPT DATA

PEK: [32]

Data Key Variant:

Use Data Variant (0000000000FF0000 0000000000FF0000)

Current Variant: 0000000000FF0000 0000000000FF0000

Data: [128]

Operation Results

Data Key (after XOR variant):

OWF Processed Key:

Processed Data:

DUKPT PIN

PEK: [32]

PIN Block: [16]

Operation Results

PIN Key (after XOR variant):

Processed PIN:

DUKPT MAC

Algorithm: ANSI X9.19 (ISO-9797-1 Algorithm 3)
MAC Type: Retail MAC (Encrypt-Decrypt-Encrypt)
Padding: Zero padding

PEK: [32]

Data: [672]

MAC Generation Results

MAC Key (PEK XOR variant):

Key1 (first 8 bytes):

Key2 (second 8 bytes):

Padded Data (zero padding):

Intermediate MAC (after CBC):

Decrypted (with Key2):

Generated MAC:

TR-31 Key Decode

TR-31 Format: ANSI X9.24-3 Key Block Protection Standard
Purpose: Secure key exchange and storage
Structure: Version + Length + Key Usage + Algorithm + Mode + Key Block

TR-31 Key Block: [0]

Key Block Protection Key (KBPK): [0]

TR-31 Decode Results

Header:

Key Block Version:

Key Block Length:

Key Usage:

Algorithm:

Mode of Use:

Key Version Number:

Exportability:

Version Number:

Number of Optional Blocks:

Key Context:

Optional Block Data:

Pad Data:

Decrypted Key (plain):

TR-31 Key Encode

TR-31 Format: ANSI X9.24-3 Key Block Protection Standard
Purpose: Secure key packaging for distribution
Output: Encrypted key block with integrity protection

KBPK: [0]

Key Encryption Key (KEK): [0]

Version ID:

Key Usage:

Algorithm:

Mode of Use:

Exportability:

Version Number: [2]

Number of Optional Blocks: [2]

Key Context:

Optional Blocks Data: [0]

Pad Data: [0]

TR-31 Encode Results

TR-31 Key Block: [0]

Header Information:

Version ID:

Version Number:

Optional Blocks Count:

Key Context:

Optional Data:

Pad Data:

Encrypted Key:

MAC/Authentication:

DES Tools

Mode:

ECB

CBC

Padding:

Key: [16]

DES: 8 bytes (16 hex chars)

Data: [32]

IV: [16]

IV must be 8 bytes (16 hex chars) for both DES and 3DES

Results

Output: [0]

3DES Tools

Mode:

ECB

CBC

Padding:

Key: [32]

3DES: 16 or 24 bytes (32 or 48 hex chars)

Data: [32]

IV: [16]

IV must be 8 bytes (16 hex chars) for 3DES

Results

Output: [0]

AES-128 Tools

Mode:

ECB

CBC

CFB

OFB

Key Check Value

Key: [32]

AES-128: 16 bytes (32 hex chars)

Data: [32]

IV: [32]

IV must be 16 bytes (32 hex chars) for AES CBC, CFB, and OFB modes

Results

Output: [0]

AES-192 Tools

Mode:

ECB

CBC

CFB

OFB

Key Check Value

Key: [48]

AES-192: 24 bytes (48 hex chars)

Data: [32]

IV: [32]

IV must be 16 bytes (32 hex chars) for AES CBC, CFB, and OFB modes

Results

Output: [0]

AES-256 Tools

Mode:

ECB

CBC

CFB

OFB

Key Check Value

Key: [64]

AES-256: 32 bytes (64 hex chars)

Data: [32]

IV: [32]

IV must be 16 bytes (32 hex chars) for AES CBC, CFB, and OFB modes

Results

Output: [0]

Feature Coming Soon

This feature is currently under development.

$ CRYPTO_TOOLS

PEK Derivation

Derived Results

DUKPT DATA

Operation Results

DUKPT PIN

Operation Results

DUKPT MAC

MAC Generation Results

TR-31 Key Decode

TR-31 Decode Results

TR-31 Key Encode

TR-31 Encode Results

DES Tools

Results

3DES Tools

Results

AES-128 Tools

Results

AES-192 Tools

Results

AES-256 Tools

Results

Feature Coming Soon