TOOLS / KEY MANAGEMENT
DUKPT (TDES)
ANSI X9.24-1 key derivation, PIN blocks, MAC, and data encryption.
Calculator reference
Verification evidence and limitations →
What it calculates
Derives a TDES transaction key from a BDK or IPEK and KSN, then applies PIN, MAC or data variants.
Inputs and methods
16-byte starting key and 10-byte KSN. PIN blocks use 8 bytes; data supports ECB/CBC with whole blocks.
Worked example
BDK 0123456789ABCDEFFEDCBA9876543210, KSN FFFF9876543210E00001.
IPEK: 6AC292FAA1315B4D858AB3A3D7D5933A Current key: 042666B49184CFA368DE9628D0397BC9
Specification and limits
This is the TDES profile, not AES DUKPT. The calculator does not manage terminal key erasure or transaction counters.
OpenEMV ANSI test vectors ↗