EMV Tools

Free browser-based tools for EMV payment card development and cryptography: encrypt and decrypt with DES/TDES/AES (ECB/CBC), calculate ISO 9797-1 MACs (including X9.19 Retail MAC and AES-CMAC), parse and validate EMV certificates (CA → Issuer → ICC chain), perform raw RSA operations, combine TDES/AES key components with XOR and KCV calculation, fix DES key parity, inspect binary files in hex, parse EMV CPS personalization files, and calculate SHA-1/SHA-256 hashes. All processing happens locally in your browser — keys and data are never uploaded. See also the payment network CA public key database.

Symmetric Crypto

DES/TDES and AES operations for payment cryptography: encrypt, decrypt, and MAC calculation. All inputs are ASCII HEX (whitespace ignored) and all processing happens locally in your browser.

Encrypt / Decrypt

Algorithm: Mode: Padding:

Key (HEX):

IV (HEX, CBC only — blank for zero IV):

Data (HEX):

Result (HEX):

MAC Calculator

Zero IV. Padding applies to the ISO 9797-1 algorithms; AES-CMAC handles its own padding.

Algorithm: Padding:

Key (HEX):

Data (HEX):

MAC (HEX):

RSA

Perform raw RSA operations. All inputs and outputs are ASCII HEX. Ensure your data, when converted to a number, is less than the modulus.

Modulus (N - HEX):

Public Exponent (e - HEX):

Private Exponent (d - HEX):

Data (Input - HEX):

Result (Output - HEX):

Hex Manipulator

Upload a binary file to view its content as a continuous block of ASCII HEX. Click inside the text area to see cursor offsets. You can edit the text to add formatting (spaces, newlines).

Parity:

Cursor: Char 0 | Byte 0

Selected: 0 Chars | 0 Bytes

XOR Key Components

Combine key components delivered in separate parts by XORing them together. Whitespace is ignored; all components must be the same length.

Component A (HEX):

Component B (HEX):

Component C (HEX, optional):

KCV Type:

Combined Key (HEX):

CPS Parser

Extract and parse EMV CPS DGI data from personalization files. This tool locates binary card data between configurable ASCII delimiters and formats it for easy analysis.

File Configuration

Start Delimiter:

End Delimiter:

Select CPS Personalization File:

Parsed CPS Data:

Hash Calculation

Calculate cryptographic hashes. Input data as ASCII HEX.

Select Hash Algorithm:

Input Data (HEX):

Hash Result (HEX):

EMV Certificates

Select Certificate Tool:

Parse Issuer Certificate

Parse an already "opened" (RSA-decrypted) Issuer Public Key Certificate. Paste the recovered certificate data including header (6A) and trailer (BC).

Opened Certificate Data (HEX):

Issuer Public Key Remainder (HEX, optional):

Issuer Public Key Exponent (HEX, optional):

Parsed Certificate Fields:

Header	-
Certificate Format	-
Issuer Identifier	-
Certificate Expiration (MMYY)	-
Certificate Serial Number	-
Hash Algorithm	-
Public Key Algorithm	-
Public Key Length	-
Public Key Exponent Length	-
Issuer Public Key (from cert)	-
Padding	-
Hash Result (from cert)	-
Trailer	-

Reconstructed Issuer Public Key:

Hash Verification:

Validate Certificate Chain (CA → Issuer → ICC)

Validate the full EMV certificate chain. The Issuer Certificate is recovered using the CA Public Key (auto-detected by certificate size). If an ICC Certificate is also provided, it is then recovered using the Issuer Public Key extracted from the validated Issuer Certificate. Leave the ICC fields blank to validate the Issuer Certificate only.

Auto-detect CA Public Key

Issuer Certificate (HEX):

Detected CA Key:

Issuer Public Key Remainder (HEX, optional):

Issuer Public Key Exponent (HEX):

ICC Certificate (optional)

Provide these to chain-validate the ICC Certificate using the Issuer Public Key recovered above.

ICC Certificate (Tag 9F46, HEX):

ICC Public Key Remainder (Tag 9F48, HEX, optional):

ICC Public Key Exponent (Tag 9F47, HEX):

Static Data to be Authenticated (HEX, optional):

Results:

Validate CSR Response

Upload a payment network CSR response file — Mastercard (.c** where ** is the CA index) or Visa (.I** ) — to extract and validate the Issuer Public Key Certificate. Visa files also carry a CA file signature which is verified.

Format:

CA Public Key (required for Elo Discover — file has no key index):

Issuer Exponent (HEX, used in hash check — not present in Elo files):

Upload CSR Response File:

Detailed Log:

Parse ICC Certificate

Parse an already "opened" (RSA-decrypted) ICC Public Key Certificate (Tag 9F46 recovered with the Issuer Public Key). Paste the recovered certificate data including header (6A) and trailer (BC).

Opened ICC Certificate Data (HEX):

ICC Public Key Remainder (Tag 9F48, HEX, optional):

ICC Public Key Exponent (Tag 9F47, HEX, optional):

Static Data to be Authenticated (HEX, optional):

Parsed Certificate Fields:

Header	-
Certificate Format	-
Application PAN	-
Certificate Expiration (MMYY)	-
Certificate Serial Number	-
Hash Algorithm	-
ICC PK Algorithm	-
ICC PK Length	-
ICC PK Exponent Length	-
ICC Public Key (from cert)	-
Padding	-
Hash Result (from cert)	-
Trailer	-

Reconstructed ICC Public Key:

Hash Verification:

Keyset Validation

Upload a keysets JSON file to validate certificate expiration dates. Each certificate is recovered using the matching CA Public Key, and the expiration date embedded in the certificate is compared against the CertificateExpirationDate field in the JSON.

Upload Keysets JSON File:

Detailed Log:

Other EMV Calculations

Select EMV Calculation Tool:

ELO Request Parser

Load an ELO binary file (.req extension) to parse and extract certificate information.

Upload ELO Request File (.req):

Certificate Summary:

Key Certificate Details
IIN/BIN	-
Issuer Key Index	-
Expiration Date	-
Key Size	-
Public Exponent	-

Detailed Parsing Output:

PIN Block (TBD)

Coming soon...

ARQC (TBD)

Coming soon...

Network	-
BIN	-
File ID	-
Serial Number	-
Expiry (MM/YY)	-
CA Key Index	-
Exponent	-
Certificate Size	-

EMV Tools

Symmetric Crypto

Encrypt / Decrypt

MAC Calculator

RSA

Hex Manipulator

XOR Key Components

CPS Parser

File Configuration

Hash Calculation

EMV Certificates

Parse Issuer Certificate

Parsed Certificate Fields:

Reconstructed Issuer Public Key:

Hash Verification:

Validate Certificate Chain (CA → Issuer → ICC)

ICC Certificate (optional)

Validate CSR Response

CSR Response File Info:

Certificate Summary:

Hash Verification:

Parse ICC Certificate

Parsed Certificate Fields:

Reconstructed ICC Public Key:

Hash Verification:

Keyset Validation

Validation Report:

Other EMV Calculations

ELO Request Parser

Certificate Summary:

PIN Block (TBD)

ARQC (TBD)