An examination of the security of the TR-31 and AS 2805 schemes
*Arthur van der MerweCorresponding authoravande22@myune.edu.auSchool of Science and TechnologyUniversity of New EnglandArmidale, NSW, 2351, Australia0000-0001-9146-5433View full profile → , David Pauldpaul4@une.edu.auSchool of Science and TechnologyUniversity of New EnglandArmidale, NSW, 2351, Australia0000-0002-2428-5667View full profile → , Jelena Schmalzjschmalz@une.edu.auSchool of Science and TechnologyUniversity of New EnglandArmidale, NSW, 2351, Australia0000-0001-5486-7679View full profile → , Timothy M. Schaerftschaerf@une.edu.auSchool of Science and TechnologyUniversity of New EnglandArmidale, NSW, 2351, Australia0000-0001-6642-8374View full profile →
* Corresponding author · click or hover a name for details
- Received:
- 09 Dec 2021
- Accepted:
- 03 Jun 2022
- Published Online:
- 30 Sep 2023
- Article type:
- Research Article
- Language:
- EN
- Article no.:
- JDMSC-1644
- Pages:
- 1761–1771
Abstract
Keywords
Subject Classifications
References
[1] ANSI: Ansi x9.24-1-2017: Retail financial services symmetric key management part 1: Using symmetric techniques. Tech. rep., American National Standards Institute (2017).
[2] ANSI: Ansi x9 tr 31-2018: Interoperable secure key exchange key block specification. Tech. rep., American National Standards Institute (2018).
[3] Bellare, M., Namprempre, C.: Authenticated encryption: Relations among notions and analysis of the generic composition paradigm. Journal of Cryptology 21(4), 469–491 (2008).
[4] Bellare, M., Rogaway, P.: The security of triple encryption and a framework for code-based game-playing proofs. In: Annual International Conference on the Theory and Applications of Cryptographic Techniques. pp. 409–426. Springer (2006).
[5] Boneh, D., Shoup, V.: A graduate course in applied cryptography. Draft 0.2 (2015).
[6] ISO Central Secretary: Information technology - Security techniques – Encryption algorithms- Part 3: Block ciphers. Standard ISO/IEC 18033.3:2020, International Organization for Standardization, Geneva, CH (2012), https://www.iso.org/standard/54531.html.
[7] IT-005, Financial Transaction Systems: Electronic funds transfer – Requirements for interfaces, Part 6.3: Key management - Session keys - Node to node. Standard AS 2805.6.3:2000, Standards Australia, Sydney, AU (2000).
[8] IT-005, Financial Transaction Systems: Electronic funds transfer – Requirements for interfaces, Part 9: Privacy of communications. Standard AS 2805.9:2000, Standards Australia, Sydney, AU (2000).
[9] IT-005, Financial Transaction Systems: Electronic funds transfer – Requirements for interfaces - Key management - Transaction keys. Standard AS 2805.6.2:2002, Standards Australia, Sydney, AU (2002).
[10] IT-005, Financial Transaction Systems: Electronic funds transfer – Requirements for interfaces - Key management - Session keys - Terminal to acquirer. Standard AS 2805.6.4:2006, Standards Australia, Sydney, AU (2006).
[11] Krawczyk, H.: Cryptographic extraction and key derivation: The hkdf scheme. In: Annual Cryptology Conference. pp. 631–648. Springer (2010).
[12] Morse, E.A., Raval, V.: Pci dss: Payment card industry data security standards in context. Computer Law & Security Review 24(6),
540–554 (2008).
