ARQC / ARPC (EMV Cryptograms)

Generates EMV cryptograms: ARQC (Authorization Request Cryptogram) created by the card to request authorization, and ARPC (Authorization Response Cryptogram) created by the issuer to respond. Based on the card's ICC Master Key and session data.

Inputs

• Tab: Switch between ARQC generation and ARPC generation.
• IMK: Issuer Master Key (ICC Master Key) in hexadecimal (16 bytes / 32 hex chars).
• PAN: Primary Account Number of the card.
• PAN Sequence Number: PAN Sequence Number (2 hex digits, typically "00").
• ATC: Application Transaction Counter (4 hex chars). Increments with each transaction.
• Unpredictable Number: Random number from the terminal (8 hex chars).
• Transaction Data: Concatenated transaction data elements in hexadecimal.
• Derivation Method: Key derivation method for session key.

Tips

• ARQC proves the card is genuine and the transaction data has not been tampered with.
• ARPC proves the issuer authorized the transaction.
• The ATC prevents replay attacks — each transaction uses a unique counter.

Standards: EMV Book 2, ISO 9797-1

Open the ARQC / ARPC (EMV Cryptograms) tool — free, runs entirely in your browser.

Related MAC & EMV tools