.net - 实现 DUKPT key 管理

Question

关闭。这个问题需要多问 focused 。目前不接受答案。

---

想要改进此问题吗？更新问题，使其仅关注一个问题 editing this post .

已关闭 8 年前。

Improve this question

我目前正在寻求实现 DUKPT (每个事务派生唯一 key )并且不知道如何成功实现它。有谁知道分步指南/现有实现，或者有关客户端-服务器应用程序中解决方案实际实现的更多信息？

DUKPT 简介:

In cryptography, Derived Unique Key Per Transaction (DUKPT) is a key management scheme in which for every transaction, a unique key is used which is derived from a fixed key. Therefore, if a derived key is compromised, future and past transaction data are still protected since the next or prior keys cannot be determined easily. DUKPT is specified in ANSI X9.24 part 1.

DUKPT allows the processing of the encryption to be moved away from the devices that hold the shared secret. The encryption is done with a derived key, which is not re-used after the transaction. DUKPT is used to encrypt electronic commerce transactions. While it can be used to protect information between two companies or banks, it is typically used to encrypt PIN information acquired by Point-Of-Sale (POS) devices. DUKPT is not itself an encryption standard; rather it is a key management technique. The features of the DUKPT scheme are:

• Enable both originating and receiving parties to be in agreement as to the key being used for a given transaction,
• Each transaction will have a distinct key from all other transactions, except by coincidence,
• If a present key is compromised, past and future keys (and thus the transactional data encrypted under them) remain uncompromised,
• Each device generates a different key sequence,
• Originators and receivers of encrypted messages do not have to perform an interactive key-agreement protocol beforehand.

Answer 1

我最近经历了同样的痛苦，导致了这个 iOS DUKPT 实现。

https://github.com/mburshteyn1/DUKPT