71 lines
3.3 KiB
JavaScript
71 lines
3.3 KiB
JavaScript
/**
|
|
* @license Apache-2.0
|
|
* @author Jacob Marks [https://jacobmarks.com]
|
|
*/
|
|
|
|
import Operation from "../Operation.mjs";
|
|
import { generateEmvAesCmacCryptogram } from "../lib/EmvCryptogram.mjs";
|
|
|
|
/**
|
|
* Generate EMV ARPC operation.
|
|
*/
|
|
class GenerateEMVARPC extends Operation {
|
|
|
|
/**
|
|
* GenerateEMVARPC constructor.
|
|
*/
|
|
constructor() {
|
|
super();
|
|
|
|
this.name = "Generate EMV ARPC";
|
|
this.module = "Payment";
|
|
this.description = "Paste the already-assembled EMV authorization-response input into the input field as hex and generate an AES-CMAC-based ARPC.<br><br><b>Input:</b> preassembled ARPC input data as hex.<br><b>Arguments:</b> provide the issuer session key in hex and choose how many bytes of the CMAC should be returned.<br><br><b>Validation:</b> Partially verified. This intentionally covers only supplied-key AES-CMAC-style EMV response profiles and does not derive issuer session keys or assemble response fields for you.<br><br><b>Session key derivation:</b> The issuer session key for ARPC generation is typically derived from the same issuer master key used for ARQC verification, using the same ATC-based derivation. The ARPC input data is assembled from the ARQC value and the Authorization Response Code (ARC). This operation expects both the session key and the preimage to be assembled before calling it.<br><br><b>Security:</b> Clear session keys are test-use only.";
|
|
this.inlineHelp = "<strong>Input:</strong> preassembled ARPC data as hex.<br><strong>Args:</strong> provide the issuer AES session key and choose the truncated cryptogram length.<br><strong>Validation:</strong> supplied-key AES-CMAC response profile only.";
|
|
this.testDataSamples = [
|
|
{
|
|
name: "AES-CMAC ARPC sample",
|
|
input: "11223344556677889900AABBCCDDEEFF",
|
|
args: ["00112233445566778899AABBCCDDEEFF", 8, false]
|
|
}
|
|
];
|
|
this.infoURL = "https://en.wikipedia.org/wiki/EMV";
|
|
this.inputType = "string";
|
|
this.outputType = "string";
|
|
this.args = [
|
|
{
|
|
name: "Issuer session key (hex)",
|
|
type: "string",
|
|
value: "",
|
|
comment: "Provide the already-derived issuer session key as hex. Assumption: this op does not derive EMV issuer session keys."
|
|
},
|
|
{
|
|
name: "Cryptogram bytes",
|
|
type: "number",
|
|
value: 8,
|
|
min: 1,
|
|
max: 16,
|
|
comment: "Number of leftmost CMAC bytes to return. Common ARPC length is <code>8</code> bytes."
|
|
},
|
|
{
|
|
name: "Output as JSON",
|
|
type: "boolean",
|
|
value: false,
|
|
comment: "When enabled, returns the full AES-CMAC and the truncated ARPC value."
|
|
}
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param {string} input
|
|
* @param {Object[]} args
|
|
* @returns {string}
|
|
*/
|
|
run(input, args) {
|
|
const [issuerSessionKeyHex, cryptogramBytes, outputJson] = args;
|
|
const result = generateEmvAesCmacCryptogram(input, issuerSessionKeyHex, cryptogramBytes);
|
|
return outputJson ? JSON.stringify(result, null, 4) : result.cryptogramHex;
|
|
}
|
|
}
|
|
|
|
export default GenerateEMVARPC;
|