BS ISO 9564-2:2014 download.Financial services – Personal Identification Number ( PIN ) management and security.
1 Scope
This part of Iso 9564 specifies approved algorithms for the encipherment of Personal Identification
Numbers (PINs).
2 Normative references
The following documents, in whole or in part, are normatively referenced in BS ISO 9564-2 and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.
150 9564-1, Financial services – Personal Identification Number management and security – Part 1: Basic principles and requirements for PINs in card-based systems
ISO/IEC 10116, Information technology – Security techniques – Modes of operation for an n-bit block cipher
ISO/IEC 18033-2, Information technology – Security techniques – Encryption algorithms – Part 2:
Asymmetric ciphers
ISO/IEC 18033-3, Information technology — Security techniques — Encryption algorithms — Part 3: Block
ciphers
3 Triple Data Encryption Algorithm (TDEA)
3.1 Definition of the TDEA algorithm
The definition of TDEA shall be as described In the ISO/IEC 18033-3.
3.2 Use of the TDEA algorithm
Encipherment, using the TDEA as described in ISO/IEC 18033-3 with TDEA keying option 1 or 2, of the
PIN blocks described in ISO 9564-1 shall be achieved using the algorithm operating in the Electronic
Code Book (ECB) mode (with n equal to 64), as described in ISO/IEC 10116.
This algorithm is approved for use with PIN block formats 0, 1 and 3 only. 4 RSA encryption algorithm
4.1 Definition of the RSA algorithm
The definition of RSA shall be as described in ISO! IEC 18033-2.
4.2 Use of the RSA algorithm
The format 2 PIN block and its encipherment, using RSA, shall be as described in Iso 9564-1.
This algorithm is approved only for use for encipherment of offline PINs for submission to ICCs as defined
in ISO 9564-1. It is approved for use with PIN block format 2 only.
5 AES encryption algorithm
5.1 Definition of the AES algorithm
The definition of AES shall be as described in ISO/IEC 18033-3.
5.2 Use of the AES algorithm
Encipherment, using AES as described in ISO/IEC 18033-3, of the PIN blocks described in ISO 9564-1
shall be achieved using the algorithm operating in the Electronic Code Book (ECB) mode (with block size
n equal to 128), as described in ISO/IEC 10116.
This algorithm is approved for use with PIN block format 4 only.