diff --git a/PAYMENT_RECIPES.md b/PAYMENT_RECIPES.md index c1d70c5c..ad0cbade 100644 --- a/PAYMENT_RECIPES.md +++ b/PAYMENT_RECIPES.md @@ -147,7 +147,7 @@ Operations: - `PIN Data Generate` - `PIN Data Verify` -> **Note:** `Translate Payment PIN Data` is deprecated — use `PIN Block Translate` (section 7) instead. See issue #4. +> **Note:** `Translate Payment PIN Data` was removed (issue #4 — it was a duplicate of `PIN Block Translate`). Use `PIN Block Translate` (section 7) directly. Use this when: - you want AWS-style PIN-data naming for clear ISO 9564 block flows diff --git a/README.md b/README.md index a56d5346..0aedaf9f 100755 --- a/README.md +++ b/README.md @@ -22,7 +22,8 @@ They are also intended to support software emulation of common HSM-style payment Current coverage includes: - TR-31 key block parsing and TR-34 B9 envelope inspection - Key metadata inspection and structural validation -- DUKPT (TDES) key derivation +- DUKPT TDES key derivation (ANSI X9.24-1, 10-byte KSN, IPEK-based) +- DUKPT AES key derivation (ANSI X9.24-3, 12-byte KSN, IK-based, AES-128) - PIN block format parsing, construction, and translation (ISO 9564 formats 0, 1, 3) - Payment-specific MAC and KCV utilities (HMAC, AES-CMAC, TDES-CMAC, ISO 9797-1, AS2805, DUKPT variants) - EMV ARQC/ARPC generation and verification @@ -34,7 +35,6 @@ Current coverage includes: Future extensions may include: - TR-31 key block decryption with provided KBPKs -- AES DUKPT derivation ### Non-goals These extensions are not intended to: