From 0d08b2fc0482d2c83a2f35ca6440c905ae446d49 Mon Sep 17 00:00:00 2001 From: J8k3 Date: Mon, 18 May 2026 20:33:34 -0400 Subject: [PATCH] Update README and PAYMENT_RECIPES for shipped AES DUKPT and removed op README: - Added DUKPT AES key derivation to current coverage (ANSI X9.24-3, 12-byte KSN, AES-128) - Expanded DUKPT TDES line to include standard/KSN details for clarity - Removed AES DUKPT from Future extensions (it shipped) PAYMENT_RECIPES: - Replaced "deprecated" with "removed" for Translate Payment PIN Data (issue #4 was resolved) Co-Authored-By: Claude Sonnet 4.6 --- PAYMENT_RECIPES.md | 2 +- README.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/PAYMENT_RECIPES.md b/PAYMENT_RECIPES.md index c1d70c5c..ad0cbade 100644 --- a/PAYMENT_RECIPES.md +++ b/PAYMENT_RECIPES.md @@ -147,7 +147,7 @@ Operations: - `PIN Data Generate` - `PIN Data Verify` -> **Note:** `Translate Payment PIN Data` is deprecated — use `PIN Block Translate` (section 7) instead. See issue #4. +> **Note:** `Translate Payment PIN Data` was removed (issue #4 — it was a duplicate of `PIN Block Translate`). Use `PIN Block Translate` (section 7) directly. Use this when: - you want AWS-style PIN-data naming for clear ISO 9564 block flows diff --git a/README.md b/README.md index a56d5346..0aedaf9f 100755 --- a/README.md +++ b/README.md @@ -22,7 +22,8 @@ They are also intended to support software emulation of common HSM-style payment Current coverage includes: - TR-31 key block parsing and TR-34 B9 envelope inspection - Key metadata inspection and structural validation -- DUKPT (TDES) key derivation +- DUKPT TDES key derivation (ANSI X9.24-1, 10-byte KSN, IPEK-based) +- DUKPT AES key derivation (ANSI X9.24-3, 12-byte KSN, IK-based, AES-128) - PIN block format parsing, construction, and translation (ISO 9564 formats 0, 1, 3) - Payment-specific MAC and KCV utilities (HMAC, AES-CMAC, TDES-CMAC, ISO 9797-1, AS2805, DUKPT variants) - EMV ARQC/ARPC generation and verification @@ -34,7 +35,6 @@ Current coverage includes: Future extensions may include: - TR-31 key block decryption with provided KBPKs -- AES DUKPT derivation ### Non-goals These extensions are not intended to: