Skip to content

ExportAttributes

Used by
Source code in docs_src/capo_payment_cryptography/types/export_attributes.py 
12
13
14
15
16
17
18
19
20
class ExportAttributes(TypedDict, closed=True):
    export_dukpt_initial_key: NotRequired[
        "capo_payment_cryptography.types.export_dukpt_initial_key.ExportDukptInitialKey"
    ]
    """<p>Parameter information for IPEK export.</p>"""
    key_check_value_algorithm: NotRequired[
        "capo_payment_cryptography.types.key_check_value_algorithm.KeyCheckValueAlgorithm"
    ]
    """<p>The algorithm that Amazon Web Services Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity. Specify KCV for IPEK export only.</p> <p>For TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result. For HMAC keys, the KCV is computed using the hash selected at key creation on a zero-length message, taking the leftmost 3 bytes.</p>"""

export_dukpt_initial_key instance-attribute 

export_dukpt_initial_key: NotRequired[ExportDukptInitialKey]

Parameter information for IPEK export.

key_check_value_algorithm instance-attribute 

key_check_value_algorithm: NotRequired[KeyCheckValueAlgorithm]

The algorithm that Amazon Web Services Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity. Specify KCV for IPEK export only.

For TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result. For HMAC keys, the KCV is computed using the hash selected at key creation on a zero-length message, taking the leftmost 3 bytes.