DukptAttributes
Parameters that are used for Derived Unique Key Per Transaction (DUKPT) derivation algorithm.
Contents
- DukptDerivationType
-
The key type derived using DUKPT from a Base Derivation Key (BDK) and Key Serial Number (KSN). This must be less than or equal to the strength of the BDK. For example, you can't use
AES_128
as a derivation type for a BDK ofAES_128
orTDES_2KEY
.Type: String
Valid Values:
TDES_2KEY | TDES_3KEY | AES_128 | AES_192 | AES_256
Required: Yes
- KeySerialNumber
-
The unique identifier known as Key Serial Number (KSN) that comes from an encrypting device using DUKPT encryption method. The KSN is derived from the encrypting device unique identifier and an internal transaction counter.
Type: String
Length Constraints: Minimum length of 10. Maximum length of 24.
Pattern:
[0-9a-fA-F]+
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: