Module 10
Payment cryptography
3 lessonsabout 120 minAdvisor
After this module you can
- Name and separate all 10 payment surfaces (4 that need PQC, 6 that do not)
- Explain EMV, DUKPT, ISO 8583 and ISO 20022, and the payment HSM
Before thisM8: Protocols, M9: Key management and HSMs
- 0110 payment surfaces: 4 that need PQC, 6 that don'tName all 10 payment cryptography surfaces and classify each as needing or not needing PQC, with a one-sentence rationale; state clearly that this list of 10 does not cover EMV's ODA (SDA/DDA/CDA) mechanism, which is a separate, asymmetric exception
- 02EMV, DUKPT and the payment HSMDistinguish EMV's two separate cryptographic mechanisms (the symmetric transaction cryptogram versus asymmetric SDA/DDA/CDA offline authentication)
- 03ISO 8583/20022 and the Turkey-specific scopeDistinguish the ISO 8583 and ISO 20022 message structures and which is used for which kind of transaction