payShield host commands

PIN operations

payShield DE — Generate IBM PIN Offset

answers with DF

Generate an IBM PIN offset of an LMK-encrypted PIN (the M+32 hex form BA/JC/JE produce)

Fields

FieldWhat it holds
PVK Pair under LMK32 or 97 or 129 charsS… key block (97/129 chars), or 32 hex under a variant LMK
PIN under LMK16 hex chars, or 'M' + 32 hex under an AES LMK
Check Length2 charsminimum PIN length, 04-12 — sets the offset digit count
PAN12-19 digit card number
Decimalization Table0123456789012345
PIN Validation Data12 hex, five 'N's = last 5 PAN digits (e.g. 4000001NNNNN), or P+16 hex

Worked values

Example values for each field. The key blocks work against the Thales test LMK the simulator ships with.

PVK Pair under LMK
S10096V2TE00N00006426E5B63A3E97046F1D34EC724082023DE11816F49992217D1A173CA0954ED0C69BB4E342C1A415
PIN under LMK
M3D74E877D3F3F62B049262C1B5E48521
Check Length
04
PAN
4000001234567899
Decimalization Table
0123456789012345
PIN Validation Data
400000123456
Open DE in the simulator

PIN operations