List of supported host commands

Alphabetical

Command code Description Partially implemented Performs no processing Latest source code only
A0 Generate key
A2 Generate and print a component
A4 Form key from encrypted components
A6 Import key
A8 Export key
AE Translate a TMK, TPK or PVK from LMK to TMK, TPK or PVK encryption
AG Translate a TAK from LMK to TMK encryption
AS Generate a VISA CVK pair
AU Translate a CVK pair from ZMK to LMK encryption
AW Translate a CVK pair from LMK to ZMK encryption
B0 Translate key scheme
B2 Echo test
BA Encrypts a clear PIN text
BC Verify a terminal PIN using the comparison method
BE Verify an interchange PIN using the comparison method
BI Generate a BDK
BQ Translate a PIN from VISA to Racal encryption
BU Generate check value
BY Translate a ZMK from ZMK to LMK encryption
BW Translate keys from old LMK to new LMK
CA Translate a PIN block from TPK to ZPK encryption
CC Translate a PIN block from one ZPK to another
CI Translate PIN from DUKPT to ZPK
CK Verify a DUKPT PIN using the IBM method
CM Verify a DUKPT PIN using the VISA method
CU Verify and generate a VISA PVV
CW Generate a VISA CVV
CY Verify a VISA CVV
DA Verify a terminal PIN using the IBM method
DE Generate an IBM offset
DC Verify a terminal PIN using the VISA algorithm
DG Generate a VISA PVV
DW Translate a BDK from ZPK to LMK encryption
DY Translate a BDK from LMK to ZPK encryption
EA Verify an interchange PIN using the IBM method
EE Derive a PIN using the IBM method
EC Verify an interchange PIN using the VISA algorithm
FA Translate a ZPK from ZMK to LMK encryption
FC Translate a TMK, TPK or PVK from ZMK to LMK encryption
FE Translate a TMK, TPK or PVK from LMK to ZMK encryption
FG Generate a pair of random PVKs
FI Generate a ZEK or ZAK
FK Translate a ZEK or ZAK from ZMK to LMK encryption
FM Translate a ZEK or ZAK from LMK to ZMK encryption
G0 Translate PIN from DUKPT to ZMK (3DES)
GC Translate a ZPK from LMK to ZMK encryption
GG Form ZMK from three components
GM Hash a block of data Yes
GY Form ZMK from two to nine components
HA Generate a TAK
HC Generate a TMK, TPK or PVK
IA Generate a ZPK
JA Generate a random PIN
JC Translate a PIN from TPK to LMK encryption
JE Translate a PIN from ZPK to LMK encryption
JG Translate a PIN from LMK to ZPK encryption
K2 Verify Truncated Application Cryptogram (alpha) Yes
KA Generate check value
KQ ARQC verification and ARPC generation
LG Set HSM delay Yes
LI Load PIN text string Yes
M6 Generate a MAC
M8 Verify a MAC
MA Generate a MAC
MC Verify a MAC
ME Verify and translate a MAC
MG Translate a TAK from LMK to ZMK encryption
MI Translate a TAK from ZMK to LMK encryption
MQ Generate MAC/MAB for large message
MS Generate MAC/MAB using ANSI X9.19
NC Perform HSM diagnostics
NE Generate and print split components
NG Decrypt an encrypted PIN
NK Command chaining
NO HSM status
OA Print solicitation mailer Yes
OC Generate and print ZMK component
OE Generate and print a random TMK, TPK or PVK
PA Load formatting data Yes
PC Load additional formatting data Yes
PE Verify PIN solicitation data Yes
PG Verify PIN solicitation mailer cryptography Yes
PM Verify a dynamic CVV Yes
RA Cancel the authorization state
RC Verify solicitation mailer cryptography Yes

Functional

Generic Key Management Commands
  • A0 - Generate key
  • A2 - Generate and print a component
  • A4 - Form key from encrypted components
  • A6 - Import key
  • A8 - Export key
  • AE - Translate a TMK, TPK or PVK from LMK to TMK, TPK or PVK
  • AG - Translate a TAK from LMK to TMK encryption
  • B0 - Translate key scheme
  • BY - Translate a ZMK from ZMK to LMK encryption
  • HA - Generate a TAK
  • HC - Generate a TMP, TPK or PVK
  • NE - Generate and print key as split components

PIN and Offset Generation Commands
  • DE - Generate an IBM PIN offset
  • DG - Generate a VISA PVV
  • EE - Derive a PIN using the IBM method
  • JA - Generate a random PIN

PIN Change Commands
  • CU - Verify and generate a VISA PVV

PIN Verification Commands
  • BC - Verify a terminal PIN using the comparison method
  • BE - Verify an interchange PIN using the comparison method
  • DA - Verify a terminal PIN using the IBM method
  • DC - Verify a terminal PIN using the VISA algorithm
  • EA - Verify an interchange PIN using the IBM method
  • EC - Verify an interchange PIN using the VISA algorithm

PIN Translation Commands
  • BQ - Translate a PIN from VISA to Racal encryption
  • CA - Translate a PIN block from TPK to ZPK encryption
  • CC - Translate a PIN block from one ZPK to another
  • JC - Translate a PIN from TPK to LMK encryption
  • JE - Translate a PIN from ZPK to LMK encryption
  • JG - Translate a PIN from LMK to ZPK encryption

PIN Mailer Printing Commands
  • OA - Print solicitation mailer
  • PE - Verify PIN solicitation data
  • PG - Verify PIN solicitation mailer cryptography
  • RC - Verify solicitation mailer cryptography

Clear PIN Commands
  • BA - Encrypts a clear PIN text
  • NG - Decrypt an encrypted PIN

Message Authentication Code Commands
  • M6 - Generate a MAC
  • M8 - Verify a MAC

Print Output Formatting Commands
  • PA - Load formatting data
  • PC - Load additional formatting data
  • LI - Load PIN text string

Miscellaneous Commands
  • B2 - Echo test
  • BU - Generate check value
  • BW - Translate keys from old LMK to new LMK
  • LG - Set HSM delay
  • NC - Perform HSM diagnostics
  • NO - HSM status
  • NK - Command chaining
  • RA - Cancel the authorization state

Card Verification Code/Value Commands
  • CW - Generate a VISA CVV
  • CY - Verify a VISA CVV
  • PM - Verify a dynamic CVV

DUKPT Commands
  • CI - Translate PIN from DUKPT to ZPK
  • CK - Verify a DUKPT PIN using the IBM method
  • CM - Verify a DUKPT PIN using the VISA method
  • G0 - Translate PIN from DUKPT to ZPK (3DES)

RSA Cryptosystem Commands
  • GM - Hash a block of data

EMV Chip Card Commands
  • K2 - Verify Truncated Application Cryptogram (alpha version)
  • KQ - ARQC Verification and/or ARPC Generation

Legacy Commands
  • AS - Generate a VISA CVK pair
  • AU - Translate a CVK pair from ZMK to LMK encryption
  • AW - Translate a CVK pair from LMK to ZMK encryption
  • BI - Generate a BDK
  • DW - Translate a BDK from ZPK to LMK encryption
  • DY - Translate a BDK from LMK to ZPK encryption
  • FA - Translate a ZPK from ZMK to LMK encryption
  • FC - Translate a TMK, TPK or PVK from ZMK to LMK encryption
  • FE - Translate a TMK, TPK or PVK from LMK to ZMK encryption
  • FG - Generate a pair of random PVKs
  • FI - Generate a ZEK or ZAK
  • FK - Translate a ZEK or ZAK from ZMK to LMK encryption
  • FM - Translate a ZEK or ZAK from LMK to ZMK encryption
  • GC - Translate a ZPK from LMK to ZMK encryption
  • GG - Form ZMK from three components
  • GY - Form ZMK from two to nine components
  • IA - Generate a ZPK
  • KA - Generate check value
  • MA - Generate a MAC
  • MC - Verify a MAC
  • ME - Verify and translate a MAC
  • MG - Translate a TAK from LMK to ZMK encryption
  • MI - Translate a TAK from ZMK to LMK encryption
  • MQ - Generate MAC/MAB for large message
  • MS - Generate MAC/MAB using ANSI X9.19
  • OE - Generate and print a random TMK, TPK or PVK
  • OC - Generate and print ZMK component

Last edited Nov 25, 2011 at 9:15 PM by nickntg, version 10

Comments

taourarte Mar 14 at 10:36 AM 
List of supported host commands are not supported in thales simulator ???