Module 5 of 22 · Practitioner · 120 min
EMV technology
Contact transactions and the advanced APDU mechanisms behind them: the certificate chain a card carries, offline data authentication, and the cryptogram only the issuer can check.
Enrollment required
Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.
The course is tied to your account, so you sign in first and come straight back here.
One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.
No hardware is sold here, and none is needed to read the course.
Payments are final. Module 1 is free so you can judge the course before you pay. Terms
Already enrolled? Sign in
Open the free workbench →What this module covers
- 01Where the rules actually live
- 02The shape of a contact transaction
- 03Card authentication: SDA, DDA, CDA
- 04The chain, and how to read it off a capture
- 05One card, every modulus
- 06Where 36 and 42 come from
- 07What a certificate says when you open it
- 08The list that says what SDA covers
- 09The dynamic signature
- 10What none of it proves
- 11Why it gets skipped
- 12Cardholder verification
- 13The cryptogram, and what it is for
- 14Where the seams are