EMV Integrated Circuit Card Specifications for Payment System. Book 2. Security and Key Management. Ver 4.1z ECC

EMVCo, May 2007. — 198 p.Version 4.1z ECC. With support for Ecliptic Curve Cryptograghy.Scope
Changes in Version 4.1
Structure
Underlying StandardsAudienceNormative References
Definitions
Abbreviations, Notations, Conventions, and TerminologyData Element Format Conventions
Terminology
Static Data Authentication (SDA)
Keys and Certificates
Retrieval of Certification Authority Public Key
Retrieval of Issuer Public Key
Verification of Signed Static Application Data
Offline Dynamic Data Authentication
Keys and Certificates
Retrieval of Certification Authority Public Key
Retrieval of ICC Public Key
Dynamic Data Authentication (DDA)
Combined DDA/Application Cryptogram Generation (CDA)
Personal Identification Number Encipherment
Keys and Certificates
PIN Encipherment and Verification
Application Cryptogram and Issuer Authentication
Application Cryptogram Generation
Issuer Authentication
Key Management
Secure Messaging
Secure Messaging Format
Secure Messaging for Integrity and Authentication
Secure Messaging for Confidentiality
Key Management
Certification Authority Public Key Management Principles and Policies
Certification Authority Public Key Life Cycle
Principles and Policies by Phase
Sample Timelines
Terminal Security and Key Management Requirements
Security Requirements for PIN Pads
Key Management Requirements
Annex A Security Mechanisms
Symmetric Mechanisms
Asymmetric Mechanisms
Annex B Approved Cryptographic Algorithms
Symmetric Algorithms
Asymmetric Algorithms
Hashing Algorithms
Annex C Informative References
Annex D Implementation Considerations
Issuer and ICC Public Key Length Considerations
Format 1 Secure Messaging Illustration
Application Transaction Counter Considerations
CDA Modes
Common Core Definitions
Changed Sections
Offline Dynamic Data Authentication
Application Cryptogram and Issuer Authentication
Secure Messaging