Class: Aws::PaymentCryptography::Types::ExportAttributes

Inherits:

Struct

Object
Struct
Aws::PaymentCryptography::Types::ExportAttributes

show all

Defined in:: gems/aws-sdk-paymentcryptography/lib/aws-sdk-paymentcryptography/types.rb

Overview

The attributes for IPEK generation during export.

Constant Summary collapse

SENSITIVE =

[]

Instance Attribute Summary collapse

#export_dukpt_initial_key ⇒ Types::ExportDukptInitialKey
Parameter information for IPEK export.
#key_check_value_algorithm ⇒ String
The algorithm that Amazon Web Services Payment Cryptography uses to calculate the key check value (KCV).

Instance Attribute Details

#export_dukpt_initial_key ⇒ `Types::ExportDukptInitialKey`

Parameter information for IPEK export.

Returns:

(Types::ExportDukptInitialKey)

# File 'gems/aws-sdk-paymentcryptography/lib/aws-sdk-paymentcryptography/types.rb', line 246

class ExportAttributes < Struct.new(
  :export_dukpt_initial_key,
  :key_check_value_algorithm)
  SENSITIVE = []
  include Aws::Structure
end

#key_check_value_algorithm ⇒ `String`

The algorithm that Amazon Web Services Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity. Specify KCV for IPEK export only.

For TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result.