Skip to content
← Payment Systems: Magstripe, Tokenization, NFC and EMV

Module 4 of 22 · Practitioner · 150 min

Communication process for EMV transactions

The APDU protocol end to end: packet generation, commands, responses, and the structure at the core of every transaction.

Security status not satisfiedWith the course

Enrollment required

Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.

Sign in to buy · $350

The course is tied to your account, so you sign in first and come straight back here.

Pay in Bitcoin insteadRead module 1 free →See the whole course →

One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.

No hardware is sold here, and none is needed to read the course.

Payments are final. Module 1 is free so you can judge the course before you pay. Terms

What this module covers

  1. 01The protocol is not encrypted
  2. 02Two layers, and why a log is twice as long as the conversation
  3. 03The command APDU, byte by byte
  4. 04CLA: who defined this command
  5. 05P1 and P2: the bytes with no general meaning
  6. 06The four cases
  7. 07The response, and the status word
  8. 08Reading a status word as a sentence
  9. 09Le, and the two-step read
  10. 10The transaction, end to end
  11. 11BER-TLV: how the card structures an answer
  12. 12Data Object Lists: the card asking the terminal a question
  13. 13A command that expects no answer
  14. 14Where this goes next