IBM 2 Computer Hardware User Manual


 
CCA Release 2.54 Clear_PIN_Encrypt
Clear_PIN_Encrypt (CSNBCPE)
Platform/
Product
OS/2 AIX Win NT/
2000
OS/400
IBM 4758-2/23 X X X X
The Clear_PIN_Encrypt verb formats a PIN into one of the following PIN-block
formats and encrypts the results (see “PIN-Block Formats” on page E-9):
IBM 3624 format
ISO-0 format (same as the ANSI X9.8, VISA-1, and ECI formats)
ISO-1 format (same as the ECI-4 format)
ISO-2 format.
You can use the Clear_PIN_Encrypt verb to create an encrypted PIN-block for
transmission. With the RANDOM keyword, you can also have the verb generate
random PIN numbers. This can be useful when you supply PIN numbers to a
bank-card manufacturer.
Note: A clear PIN is a sensitive piece of information. Ensure that your application
program and system design provide adequate protection for any clear-PIN value.
To use this verb, specify the following:
A key used to encrypt the PIN block.
A clear PIN. When you generate random PINs, the clear-PIN variable specifies
the length of the generated-PIN value by the number of numeral zero
characters. The remainder of the variable must be padded with space
characters.
A PIN profile that specifies the format of the PIN block to be created, and any
pad digit; see “PIN Profile” on page 8-10.
When using the ISO-0 PIN-block format, the PAN_data variable provides the
account number that is exclusive-ORed with the PIN information.
The sequence number for use in certain PIN-block formats; for those PIN-block
formats that do not employ a sequence number, specify a value of 99999 in the
integer variable.
The verb does the following:
Formats the PIN into the specified PIN-block format.
Checks the control vector for the OPINENC key by doing the following:
Verifying that the CPINENC bit is one.
Encrypts the PIN block in ECB mode.
Returns the encrypted PIN-block in the encrypted_PIN_block variable.
Restrictions
None
Chapter 8. Financial Services Support Verbs 8-15