Standards Development

Scope

The scope of the proposed standard is to provide requirements and guidance for methods for generation, change, and verification of card authentication codes using at least 16-byte block ciphers or hash based MACs of equivalent strength, including time based/dynamic methods.

The following table of contents expresses the intended direction of the work effort, but would be anticipated to change as the work progresses:

Foreword

Introduction

1 Scope

2 Normative references

3 Terms and Definitions

4 Basic Principles

5 Generation and Verification of Card Security Code (CSC)

5.1 Introduction

5.2 Algorithm for CSC Annex A (informative) Worked Examples

Bibliography

Purpose

There is a global migration underway in financial services from the current default symmetric encryption standard TDES, which has been withdrawn by NIST, due to projected weakness, to AES. Industry stakeholders are requesting guidance on how to use AES and other 16-byte ciphers in the production of card security codes.