exlim/cyberchef
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README to reflect current payment extension scope

Browse Source 
- Fix operations path: payment-crypto/ subdirectory never existed; ops live in src/core/operations/
- Fix UI category name: "Payment Cryptography" -> "Payments"
- Replace stale future-extensions list with accurate current coverage (DUKPT, PIN blocks, MAC/KCV, EMV, card validation, PAN tools all implemented)
- Keep only genuine remaining future work: TR-31 KBPK decryption and AES DUKPT

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
J8k3 2026-05-04 15:20:33 -04:00
parent e1b5ae50b4
commit b76a0e99be
1 changed files with 14 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
README.md
View File

@ -19,16 +19,22 @@ The extensions are designed to help inspect, parse, validate, and construct comm
They are also intended to support software emulation of common HSM-style payment workflows for development, QA, interoperability, and integration testing. They are also intended to support software emulation of common HSM-style payment workflows for development, QA, interoperability, and integration testing.
Initial focus areas include: Current coverage includes:
- TR-31 key block parsing and encoding - TR-31 key block parsing and TR-34 B9 envelope inspection
- Key metadata inspection and structural validation - Key metadata inspection and structural validation
- DUKPT (TDES) key derivation
- PIN block format parsing, construction, and translation (ISO 9564 formats 0, 1, 3)
- Payment-specific MAC and KCV utilities (HMAC, AES-CMAC, TDES-CMAC, ISO 9797-1, AS2805, DUKPT variants)
- EMV ARQC/ARPC generation and verification
- EMV issuer-script MAC generation and verification
- Card validation data (CVV/CVC, CVV2/CVC2, iCVV) generation and verification
- IBM 3624 PIN offset and VISA PVV issuer-verification helpers
- Test PAN generation and PAN parsing across major card networks
- Deterministic, test-vector-driven transformations suitable for offline analysis - Deterministic, test-vector-driven transformations suitable for offline analysis
Future extensions may include: Future extensions may include:
- TR-31 key block validation and decryption (with provided KBPKs) - TR-31 key block decryption with provided KBPKs
- DUKPT (3DES and AES) derivation helpers - AES DUKPT derivation
- PIN block format parsing and construction
- Payment-specific MAC and KCV utilities
### Non-goals ### Non-goals
These extensions are not intended to: These extensions are not intended to:
@ -41,9 +47,9 @@ All operations are designed to be explicit, inspectable, and composable, consist
### Organization ### Organization
Custom operations live under: Custom operations live under:
src/core/operations/payment-crypto/ src/core/operations/
They appear in the CyberChef UI under the **Payment Cryptography** category. They appear in the CyberChef UI under the **Payments** category.
Recipe starter docs: Recipe starter docs:
- [PAYMENT_RECIPES.md](PAYMENT_RECIPES.md) - [PAYMENT_RECIPES.md](PAYMENT_RECIPES.md)