Skip to content

Mixed · Contact

EMV contact transaction

Step through a transaction one command at a time. Every field named, every status word explained.

Taught in modules

Step 2 of 42: Response

Step 2 of 42
Response2 bytes
61 1C

Status word

611CCompleted, with 28 more bytes waiting. The terminal must send GET RESPONSE to collect them.

Decoded objects

No TLV objects in this response.

Exercises

Answer from the capture above. The explanation is worth reading either way.

  • Level 1

    What application label does this card advertise? Type it as text.

  • Level 2

    Read the service code out of the Track 2 Equivalent Data (tag 57). Three digits.

  • Level 3

    Read to the very end of this card's CVM list (tag 8E). What is the last rule, and under what condition does it apply?

  • Level 3

    This card's CVM list contains both 1E 04 and 5E 00. The method in each is signature. What does the difference between 1E and 5E tell you?

  • Level 2

    This card offers two AIDs. One is A0000000031010. What is the other, A0000000980840?

  • Level 2

    Tag 8E on this card has a length of 0x16. How many cardholder verification rules does that give you?

  • Level 4

    The terminal sends two GENERATE AC commands. What is the Lc byte of the second one, in hex?

  • Level 4

    The second GENERATE AC begins with the issuer's Authorisation Response Code. What two bytes carry it?

  • Level 4

    Both cryptogram responses carry an Application Transaction Counter. What is its value, in hex?

Where this capture is taught

Every module below practices on this exact capture.

  1. 03Magnetic stripe dataFoundations75 minSecurity status not satisfiedWith the course
  2. 04Communication process for EMV transactionsPractitioner150 minSecurity status not satisfiedWith the course
  3. 05EMV technologyPractitioner120 minSecurity status not satisfiedWith the course
  4. 06Cardholder verification and the PINPractitioner55 minSecurity status not satisfiedWith the course
  5. 08Near field communicationPractitioner120 minSecurity status not satisfiedWith the course
  6. 09Tokenization processPractitioner60 minSecurity status not satisfiedWith the course
  7. 13Cloning, replay and downgrade attacksOperator120 minSecurity status not satisfiedWith the course
  8. 19Beyond the terminalOperator60 minSecurity status not satisfiedWith the course
  9. 21The authorization leg: from cryptogram to decisionResearcher120 minSecurity status not satisfiedWith the course