HSM ‐ TR31 Key How to add KSN in the Optional Block Data - chuwuwang/ReadingNote GitHub Wiki

注意：dukpt-dea 和 dukpt-aes 的 ksn 长度不同，但每个长度是固定的。dukpt-aes 的 ksn 4个字节，dukpt-dea 的 ksn 18个字节。

Sample

• Group1: BDK + KSN

  • KBPK_DATA1: 35307965393068756D676F713973336B
  • TR31_B0(BDK): B0104B0TX00E0100KS18FFFF9876543210E00000E79ED3F8E9B67F8E786821C8F15CE7FD7D164D1E2FE37C8EDF61959FCA8058B6

• Group2: IPEK + KSN

  • KBPK_DATA2: 6D377A6A676770326D6A6D696966306E
  • TR31_B1_1: B0104B1TX00E0100KS18FFFF9876543210E00000BF72B047FFD6BD3E793724A73FF533F43B1D6BC5B5D82958976545EF6F4836AB

• Group3: IPEK + KSN

  • KBPK_DATA3: 6D377A6A676770326D6A6D696966306E
  • TR31_B1_2: B0104B1TX00E0100KS18FFFF9876543210E00000347E67D68DF88925486D1F8969F62E69F006DACDB937AD4740F50674176BABA9

• Group4: IPEK + KSN

  • KBPK_DATA4: 1D22BF32387C600AD97F9B97A51311AC
  • TR31_K0: B0104K0TD12S0100KS1800604B120F92928000007E21275AAD6195EC93BC7127FB3D1FFD08AA1CF73F24C3C030DA35AC2B8C76F4

Thales HSM Command