

As traduções são geradas por tradução automática. Em caso de conflito entre o conteúdo da tradução e da versão original em inglês, a versão em inglês prevalecerá.

# Chaves válidas para operações criptográficas
<a name="crypto-ops-validkeys-ops"></a>

Certas chaves podem ser usadas apenas para operações específicas. Além disso, algumas operações podem limitar os principais modos de uso das chaves. Consulte a tabela a seguir para ver as combinações permitidas. 

**nota**  
Certas combinações, embora permitidas, podem criar situações inutilizáveis, como gerar códigos CVV `(generate)`, mas não conseguir verificá-los `(verify)`. 

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData (para VISA/ABA esquemas)](#w2aac15c31c15)
+ [GeneratePinData (para`IBM3624`)](#w2aac15c31c17)
+ [VerifyPinData (para VISA/ABA esquemas)](#w2aac15c31c21)
+ [VerifyPinData (para`IBM3624`)](#w2aac15c31c23)
+ [Descriptografar dados](#w2aac15c31c27)
+ [Criptografar dados](#w2aac15c31c33)
+ [Traduzir dados de PIN](#w2aac15c31c39)
+ [Gerar/verificar MAC](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [Chave de importação/exportação](#crypto-ops-validkeys.importexport)
+ [Tipos de chave não utilizados](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| Endpoint de API | Operação criptográfica ou algoritmo | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1C0\$1CHAVE DE VERIFICAÇÃO DO CARTÃO |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 Generate = true \$1,\$1 Generate = true, Verify = true \$1 | 
| GenerateCardData |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1C0\$1CHAVE DE VERIFICAÇÃO DO CARTÃO |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 Generate = true \$1,\$1 Generate = true, Verify = true \$1 | 
| GenerateCardData |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1E6\$1EMV\$1MKEY\$1OUTROS |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 DeriveKey = verdadeiro\$1 | 
| GenerateCardData |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1E4\$1EMV\$1MKEY\$1DYNAMIC\$1NUMBERS |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 DeriveKey = verdadeiro\$1 | 
| GenerateCardData |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1E6\$1EMV\$1MKEY\$1OUTROS |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 DeriveKey = verdadeiro\$1 | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| Operação criptográfica ou algoritmo | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1C0\$1CHAVE DE VERIFICAÇÃO DO CARTÃO |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 Generate = true \$1,\$1 Generate = true, Verify = true \$1 | 
|  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1C0\$1CHAVE DE VERIFICAÇÃO DO CARTÃO |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 Generate = true \$1,\$1 Generate = true, Verify = true \$1 | 
|  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1E6\$1EMV\$1MKEY\$1OUTROS |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 DeriveKey = verdadeiro\$1 | 
|  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1E4\$1EMV\$1MKEY\$1DYNAMIC\$1NUMBERS |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 DeriveKey = verdadeiro\$1 | 
|  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\$1E6\$1EMV\$1MKEY\$1OUTROS |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | \$1 DeriveKey = verdadeiro\$1 | 

## GeneratePinData (para VISA/ABA esquemas)
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave de criptografia de PIN  |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave de geração de PIN  |  TR31\$1V2\$1VISA\$1PIN\$1CHAVE DE VERIFICAÇÃO  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GeneratePinData (para`IBM3624`)
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave de criptografia de PIN  |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  Para IBM3624 \$1NATURAL\$1PIN, \$1RANDOM\$1PIN, \$1PIN\$1FROM\$1OFFSET IBM3624 IBM3624 [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) Para IBM3624 \$1PIN\$1OFFSET [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
|  Chave de geração de PIN  |  TR31\$1V1\$1 \$1PIN\$1CHAVE DE VERIFICAÇÃO IBM3624  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (para VISA/ABA esquemas)
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave de criptografia de PIN  |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave de geração de PIN  |  TR31\$1V2\$1VISA\$1PIN\$1CHAVE DE VERIFICAÇÃO  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (para`IBM3624`)
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave de criptografia de PIN  |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  Para IBM3624 \$1NATURAL\$1PIN, \$1RANDOM\$1PIN, \$1PIN\$1FROM\$1OFFSET IBM3624 IBM3624 [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
|  Chave de verificação de PIN  |  TR31\$1V1\$1 \$1PIN\$1CHAVE DE VERIFICAÇÃO IBM3624  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Descriptografar dados
<a name="w2aac15c31c27"></a>


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  DUKPT  |  TR31\$1B0\$1BASE\$1DERIVATION\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  EMV  |  TR31\$1E1\$1EMV\$1MKEY\$1CONFIDENCIALIDADE TR31\$1E6\$1EMV\$1MKEY\$1OUTROS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
|  RSA  |  TR31\$1D1\$1CHAVE\$1ASSIMÉTRICA PARA CRIPTOGRAFIA DE DADOS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chaves simétricas  |  TR31\$1D0\$1CHAVE DE CRIPTOGRAFIA DE DADOS SIMÉTRICA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Criptografar dados
<a name="w2aac15c31c33"></a>


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  DUKPT  |  TR31\$1B0\$1BASE\$1DERIVATION\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  EMV  |  TR31\$1E1\$1EMV\$1MKEY\$1CONFIDENCIALIDADE TR31\$1E6\$1EMV\$1MKEY\$1OUTROS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
|  RSA  |  TR31\$1D1\$1CHAVE\$1ASSIMÉTRICA PARA CRIPTOGRAFIA DE DADOS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chaves simétricas  |  TR31\$1D0\$1CHAVE DE CRIPTOGRAFIA DE DADOS SIMÉTRICA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Traduzir dados de PIN
<a name="w2aac15c31c39"></a>


| Direction | Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | --- | 
|  Fonte de dados de entrada  |  DUKPT  |  TR31\$1B0\$1BASE\$1DERIVATION\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Fonte de dados de entrada  |  Não-DUKPT (PEK, AWK, IWK etc)  |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Destino de dados de saída  |  DUKPT  |  TR31\$1B0\$1BASE\$1DERIVATION\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Destino de dados de saída  |  Não DUKPT (PEK, IWK, AWK etc)  |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Gerar/verificar MAC
<a name="crypto-ops-validkeys.generatemac"></a>

 As chaves MAC são usadas para criar hashes criptográficos message/body de vários dados. Não é recomendável criar uma chave com modos de uso limitados, pois você não conseguirá realizar a operação correspondente. No entanto, você pode usar import/export uma chave com apenas uma operação se o outro sistema for destinado a executar a outra metade do par de operações. 


| Uso de chave permitido | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave MAC   |  TR31\$1M1\$1ISO\$19797\$11\$1MAC\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave MAC (MAC de varejo)   |  TR31\$1M1\$1ISO\$19797\$13\$1MAC\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave MAC (CMAC)   |  TR31\$1M6\$1ISO\$19797\$15\$1CHAVE CMAC  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave MAC (HMAC)   |  TR31CHAVE \$1M7\$1HMAC  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave MAC (AS2805)   |  TR31\$1M0\$1ISO\$116609\$1MAC\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange combina geração de MAC e criptografia de PIN para operações de alteração de PIN offline do EMV. Essa operação requer dois tipos de chave diferentes: uma chave de integridade para geração de MAC e uma chave de confidencialidade para criptografia de PIN. 


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave de integridade de mensagens seguras   |  TR31\$1E2\$1EMV\$1MKEY\$1INTEGRITY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave de confidencialidade de mensagens seguras   |  TR31\$1E1\$1EMV\$1MKEY\$1CONFIDENCIALIDADE  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  PIN PEK atual (chave de criptografia PIN)   |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Novo PIN PEK (chave de criptografia PIN)   |  TR31\$1P0\$1PIN\$1CHAVE DE CRIPTOGRAFIA  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave ARQC   Aplica-se apenas aos esquemas de derivação Visa e Amex.   |  TR31\$1E0\$1EMV\$1MKEY\$1APP\$1CRIPTOGRAMAS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| Uso de chave permitido | Opção de EMV | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  TR31\$1E0\$1EMV\$1MKEY\$1APP\$1CRIPTOGRAMAS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Chave de importação/exportação
<a name="crypto-ops-validkeys.importexport"></a>


| Tipo de operação | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  Chave de embrulho TR-31  |  TR31\$1K1\$1KEY\$1BLOCK\$1PROTECTION\$1KEY TR31\$1K0\$1KEY\$1ENCRYPTION\$1KEY  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Importação de CA confiável  |  TR31\$1S0\$1CHAVE ASSIMÉTRICA PARA ASSINATURA DIGITAL  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Importação de certificado de chave pública para criptografia assimétrica  |  TR31\$1D1\$1CHAVE\$1ASSIMÉTRICA PARA CRIPTOGRAFIA DE DADOS  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
|  Chave usada para algoritmos de concordância chave, como ECDH  |  TR31\$1K3\$1CHAVE ASSIMÉTRICA POR ACORDO DE CHAVE  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Tipos de chave não utilizados
<a name="w2aac15c31c57"></a>

Os seguintes tipos de chave não são usados atualmente pela criptografia AWS de pagamento:
+  TR31\$1P1\$1PIN\$1GENERATION\$1KEY 