Update README and PAYMENT_RECIPES for shipped AES DUKPT and removed op

README:
- Added DUKPT AES key derivation to current coverage (ANSI X9.24-3, 12-byte KSN, AES-128)
- Expanded DUKPT TDES line to include standard/KSN details for clarity
- Removed AES DUKPT from Future extensions (it shipped)

PAYMENT_RECIPES:
- Replaced "deprecated" with "removed" for Translate Payment PIN Data (issue #4 was resolved)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

PAYMENT_RECIPES.md

@@ -147,7 +147,7 @@ Operations:
 - `PIN Data Generate`
 - `PIN Data Verify`
 
-> **Note:** `Translate Payment PIN Data` is deprecated — use `PIN Block Translate` (section 7) instead. See issue #4.
+> **Note:** `Translate Payment PIN Data` was removed (issue #4 — it was a duplicate of `PIN Block Translate`). Use `PIN Block Translate` (section 7) directly.
 
 Use this when:
 - you want AWS-style PIN-data naming for clear ISO 9564 block flows

README.md

@@ -22,7 +22,8 @@ They are also intended to support software emulation of common HSM-style payment
 Current coverage includes:
 - TR-31 key block parsing and TR-34 B9 envelope inspection
 - Key metadata inspection and structural validation
-- DUKPT (TDES) key derivation
+- DUKPT TDES key derivation (ANSI X9.24-1, 10-byte KSN, IPEK-based)
+- DUKPT AES key derivation (ANSI X9.24-3, 12-byte KSN, IK-based, AES-128)
 - PIN block format parsing, construction, and translation (ISO 9564 formats 0, 1, 3)
 - Payment-specific MAC and KCV utilities (HMAC, AES-CMAC, TDES-CMAC, ISO 9797-1, AS2805, DUKPT variants)
 - EMV ARQC/ARPC generation and verification
@@ -34,7 +35,6 @@ Current coverage includes:
 
 Future extensions may include:
 - TR-31 key block decryption with provided KBPKs
-- AES DUKPT derivation
 
 ### Non-goals
 These extensions are not intended to: