EMV Tools
Symmetric Crypto
Tools for symmetric key cryptography (e.g., AES, DES). Provide input fields for plaintext/ciphertext, key, IV, and options for algorithm, mode, and padding.
RSA
Perform raw RSA operations. All inputs and outputs are ASCII HEX. Ensure your data, when converted to a number, is less than the modulus.
Hex Manipulator
Upload a binary file to view its content as a continuous block of ASCII HEX. Click inside the text area to see cursor offsets. You can edit the text to add formatting (spaces, newlines).
CPS Parser
Extract and parse EMV CPS DGI data from personalization files. This tool locates binary card data between configurable ASCII delimiters and formats it for easy analysis.
File Configuration
Hash Calculation
Calculate cryptographic hashes. Input data as ASCII HEX.
EMV Certificates
Parse Issuer Certificate
Parse an already "opened" (RSA-decrypted) Issuer Public Key Certificate. Paste the recovered certificate data including header (6A) and trailer (BC).
Parsed Certificate Fields:
| Header | - |
| Certificate Format | - |
| Issuer Identifier | - |
| Certificate Expiration (MMYY) | - |
| Certificate Serial Number | - |
| Hash Algorithm | - |
| Public Key Algorithm | - |
| Public Key Length | - |
| Public Key Exponent Length | - |
| Issuer Public Key (from cert) | - |
| Padding | - |
| Hash Result (from cert) | - |
| Trailer | - |
Reconstructed Issuer Public Key:
Hash Verification:
Validate Certificate Chain (CA → Issuer → ICC)
Validate the full EMV certificate chain. The Issuer Certificate is recovered using the CA Public Key (auto-detected by certificate size). If an ICC Certificate is also provided, it is then recovered using the Issuer Public Key extracted from the validated Issuer Certificate. Leave the ICC fields blank to validate the Issuer Certificate only.
ICC Certificate (optional)
Provide these to chain-validate the ICC Certificate using the Issuer Public Key recovered above.
Validate CSR Response
Upload a Mastercard CSR response file (.cEF) to extract and validate the Issuer Public Key Certificate.
Parse ICC Certificate
Parse an already "opened" (RSA-decrypted) ICC Public Key Certificate (Tag 9F46 recovered with the Issuer Public Key). Paste the recovered certificate data including header (6A) and trailer (BC).
Parsed Certificate Fields:
| Header | - |
| Certificate Format | - |
| Application PAN | - |
| Certificate Expiration (MMYY) | - |
| Certificate Serial Number | - |
| Hash Algorithm | - |
| ICC PK Algorithm | - |
| ICC PK Length | - |
| ICC PK Exponent Length | - |
| ICC Public Key (from cert) | - |
| Padding | - |
| Hash Result (from cert) | - |
| Trailer | - |
Reconstructed ICC Public Key:
Hash Verification:
Keyset Validation
Upload a keysets JSON file to validate certificate expiration dates. Each certificate is recovered using the matching CA Public Key, and the expiration date embedded in the certificate is compared against the CertificateExpirationDate field in the JSON.
Other EMV Calculations
ELO Request Parser
Load an ELO binary file (.req extension) to parse and extract certificate information.
Certificate Summary:
| Key Certificate Details | |
|---|---|
| IIN/BIN | - |
| Issuer Key Index | - |
| Expiration Date | - |
| Key Size | - |
| Public Exponent | - |
PIN Block (TBD)
Coming soon...
ARQC (TBD)
Coming soon...