VeriFone MX800 series Programmer's Manual page 310

IPP MS DUKPT C
AND OMMUNICATIONS
Common Packets
Packet Z60 Format
DUKPT
Packet Z60 Length:
Sample Packet Z60
for MS 1DES:
Sample Packet Z60
for DUKPT:
Sample Packet Z60
for MS GISKE:
310
M X 800 S P
ERIES ROGRAMMERS
P
ACKETS
<STX>Z60.[aaa...aaa]<FS>[DUKPT ENCRYPTION]<ETX>{LRC}
Table 47 Packet Z60 Format
Data Elements Characteristics
<STX> 1H
Packet Type 3AN
Packet Delimiter 1A
[aaa...aa] 8-19N
<FS> 1H
[www...www] 16AH or 120AH
or
DUKPT
ENCRYPTION
<ETX> 1H
{LRC} 1H
•
Maximum: 147 characters
•
Minimum: 32 characters
<STX>Z60.0123456789012345678<FS>0123456789012345<ETX>{LRC}
<STX>Z60.0123456789012345678<FS>DUKPT ENCRYPTION<ETX>{LRC}
<STX>Z60.0123456789012345678<FS>01234567890123456789012345678901234567890
1234567890123456789012345678901234567890123456789012345678901234567890123
456789<ETX>{LRC}
G
UIDE
Comments
Start of Text, Value: 02h
Value: Z60
Value: (.), 2Eh
Card account number
Field Separator, Value: 1Ch
[www....www] – encrypted working key
(encrypted session key)
DUKPT ENCRYPTION means DUKPT is
selected. Otherwise, it is the working key of
MS encrypted under the master key. GISKE is
used here for 3DES session key support.
Size of [www...www] indicates which packet
format is used:
16AH – 1DES, key-only format
•
120AH – GISKE key block format. For more
•
details on GISKE refer GISKE Key Block
Spec, VPN 22986.
(1DES only) If zero key support is enabled
•
and the encrypted working key is zero-filled,
the currently selected master key is used as
the working key.
(1DES only) If zero key support mode is
•
disabled, the passed key is used regardless
of the encrypted key value.
Zero GISKE session key support for GISKE
•
key block format communication protocol.
(see Using a Session Key).
Zero key support and zero GISKE session
•
key support are controlled by a switch in the
key management option register set using
packet 17 and checked using packet 18.
End of Text, Value: 03h
Error Check