salmg/academy
Sign in
Payment Systems: Magstripe, Tokenization, NFC and EMV
Level 3 · Operator60 min

Beyond the terminal

ISO 8583, switches and acquirer hosts, HSMs, DUKPT key derivation, ISO 9564 PIN block formats and key ceremonies — the other half of the rail.

Enrolment required

Module 1 of this course is free to read. The rest needs an enrolment — and so does nothing else on this site: the workbench, the APDU decoder and the whole capture corpus stay open to everyone, signed in or not.

Sign inAbout enrolmentThe workbench and decoder are free

What this module covers

  1. 01First, which boundary are you on?
  2. 02ISO 8583: the message that carries the money
  3. 03The bitmap
  4. 04The elements you will meet constantly
  5. 05Where the lengths come from
  6. 06Response codes, and which ones matter
  7. 07Entry mode: the downgrade, on the wire
  8. 08PINs, and the boxes they live in
  9. 09DUKPT: a key per transaction
  10. 10Key ceremonies
  11. 11FASTCash: attacking the switch, not the card
  12. 12ISO 20022, and why the migration is slow