Skip to content
← Payment Systems: Magstripe, Tokenization, NFC and EMV

Module 19 of 22 · Operator · 60 min

Beyond the terminal

ISO 8583, switches and acquirer hosts, HSMs, DUKPT key derivation, ISO 9564 PIN block formats and key ceremonies: the other half of the rail.

Security status not satisfiedWith the course

Enrollment required

Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.

Sign in to buy · $350

The course is tied to your account, so you sign in first and come straight back here.

Pay in Bitcoin insteadRead module 1 free →See the whole course →

One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.

No hardware is sold here, and none is needed to read the course.

Payments are final. Module 1 is free so you can judge the course before you pay. Terms

What this module covers

  1. 01First, which boundary are you on?
  2. 02ISO 8583: the message that carries the money
  3. 03The bitmap
  4. 04The elements you will meet constantly
  5. 05Where the lengths come from
  6. 06Response codes, and which ones matter
  7. 07Entry mode: the downgrade, on the wire
  8. 08PINs, and the boxes they live in
  9. 09DUKPT: a key per transaction
  10. 10Key ceremonies
  11. 11FASTCash: attacking the switch, not the card
  12. 12ISO 20022, and why the migration is slow

Open in the workbench