Dukpt supporting triple des key

[Kapilashantha Rajapaksha]

Dear All,

Is it supporting DUKPT for triple des key (BDK, Future key etc ) ?

Regards

[chhil]

jpos 2.1.1 added support for DUKPT according to the changelog of the release. 

There is a test case for it, you can see its usage. 

https://github.com/jpos/jPOS/blob/master/jpos/src/test/java/org/jpos/security/jceadapter/DUKPTTest.java

-chhil

--
--
jPOS is licensed under AGPL - free for community usage for your open-source project. Licenses are also available for commercial usage. Please support jPOS, contact: sa...@jpos.org
---
You received this message because you are subscribed to the Google Groups "jPOS Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jpos-users+unsubscribe@googlegroups.com.
To post to this group, send email to jpos-...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jpos-users/CAKV%2BfV189i%3Dc0vBanYKdy_VYLBCTt0_AVvoU4VoVJnWahm3w0Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Kapilashantha Rajapaksha]

Thanks for the information,

I am working with PADSS compliance , they asking to change 128 to 192 key for DUKPT ( I'm currently using double length  for BDK and generating FK also double length  )

Can I change double to triple in DUKPT ?

Regards

To view this discussion on the web visit https://groups.google.com/d/msgid/jpos-users/CAPazefCcDsO0ObwMAph3nUBm4O2a4ywvaRJJdiLahGgWHVQY1A%40mail.gmail.com.

[Victor Salaman]

You should really be using an HSM! 

To view this discussion on the web visit https://groups.google.com/d/msgid/jpos-users/CAKV%2BfV3oNMJdi3kkgWvWCYJGTt4p3HtqhGfJRG4t-ELY694UyQ%40mail.gmail.com.

[Kapilashantha Rajapaksha]

I'm using a general purpose HSM.  Let me know that Dukpt is supporting for 192 keys?

Regards

To view this discussion on the web visit https://groups.google.com/d/msgid/jpos-users/CALK1SyzvB2vH4bKmEk1jmOD0HcMJ%2BTepRJaKG-O_1Ago8sNtMA%40mail.gmail.com.

[chhil]

If you look at https://github.com/jpos/jPOS/blob/master/jpos/src/main/java/org/jpos/security/jceadapter/JCESecurityModule.java#L2396-L2418

and the call to calculateDerivedKey from it, you will notice it differentiates between single and triple des and calls accordingly. 

https://github.com/jpos/jPOS/blob/master/jpos/src/main/java/org/jpos/security/jceadapter/JCESecurityModule.java#L2209-L2213

I think you should be fine to use 3des dukpt with the security module available. 

Please note, I have not used this myself, I am simply interpreting the code that's available.

-chhil

To view this discussion on the web visit https://groups.google.com/d/msgid/jpos-users/CAKV%2BfV0FVw8QOcbxD3TjAQBB9xHUMktmpKPZchqi4W1ftPJDNg%40mail.gmail.com.