EMV Integrated Circuit Card Specifications for Payment Systems. Book 2. Security and Key Management. Version 4.2

EMVCo, June 2008. — 177 p.Part I - General
Scope
Changes in Version 4.2
Structure
Underlying StandardsAudienceNormative References
Definitions
Abbreviations, Notations, Conventions, and TerminologyData Element Format Conventions
Terminology
Static Data Authentication (SDA)
Keys and Certificates
Retrieval of Certification Authority Public Key
Retrieval of Issuer Public Key
Verification of Signed Static Application Data
Offline Dynamic Data Authentication
Keys and Certificates
Retrieval of Certification Authority Public Key
Retrieval of Issuer Public Key
Retrieval of ICC Public Key
Dynamic Data Authentication (DDA)
Combined DDA/Application Cryptogram Generation (CDA)
Personal Identification Number Encipherment
Keys and Certificates
PIN Encipherment and Verification
Application Cryptogram and Issuer Authentication
Application Cryptogram Generation
Issuer Authentication
Key Management
Secure Messaging
Secure Messaging Format
Secure Messaging for Integrity and Authentication
Secure Messaging for Confidentiality
Key Management
Certification Authority Public Key Management Principles and Policies
Certification Authority Public Key Life Cycle
Principles and Policies by Phase
Sample Timelines
Terminal Security and Key Management Requirements
Security Requirements for PIN Pads
Key Management RequirementsAnnex A Security Mechanisms
Annex B Approved Cryptographic Algorithms
Annex C Informative References
Annex D Implementation ConsiderationsCommon Core DefinitionsChanged Sections