Die vorliegende Übersetzung wurde maschinell erstellt. Im Falle eines Konflikts oder eines Widerspruchs zwischen dieser übersetzten Fassung und der englischen Fassung (einschließlich infolge von Verzögerungen bei der Übersetzung) ist die englische Fassung maßgeblich.
# Gültige Schlüssel für kryptografische Operationen
Bestimmte Schlüssel können nur für bestimmte Operationen verwendet werden. Darüber hinaus können einige Operationen die wichtigsten Verwendungsmodi für Schlüssel einschränken. Die zulässigen Kombinationen finden Sie in der folgenden Tabelle.
**Anmerkung**
Bestimmte Kombinationen sind zwar zulässig, können aber zu unbrauchbaren Situationen führen, z. B. beim Generieren von CVV-Codes, die dann `(generate)` aber nicht verifiziert werden können. `(verify)`
**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData (für VISA/ABA Schemata)](#w2aac15c31c15)
+ [GeneratePinData (für`IBM3624`)](#w2aac15c31c17)
+ [VerifyPinData (für VISA/ABA Schemata)](#w2aac15c31c21)
+ [VerifyPinData (für`IBM3624`)](#w2aac15c31c23)
+ [Daten entschlüsseln](#w2aac15c31c27)
+ [Encrypt Data](#w2aac15c31c33)
+ [Translate Pin Data](#w2aac15c31c39)
+ [MAC generieren/verifizieren](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [Schlüssel Import/Export](#crypto-ops-validkeys.importexport)
+ [Unbenutzte Schlüsseltypen](#w2aac15c31c57)
## GenerateCardData
| API-Endpunkt | Kryptografischer Vorgang oder Algorithmus | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- | --- |
| GenerateCardData | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1C0\$1KARTENÜBERPRÜFUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1Generieren = wahr\$1, \$1Generieren = wahr, Überprüfen = wahr\$1 |
| GenerateCardData | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1C0\$1CARD\$1VERIFICATION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1Generieren = wahr\$1, \$1Generieren = wahr, Überprüfen = wahr\$1 |
| GenerateCardData | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E6\$1EMV\$1MKEY\$1SONSTIGES | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1= wahr\$1 DeriveKey |
| GenerateCardData | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E4\$1EMV\$1MKEY\$1DYNAMISCHE\$1NUMBERS | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1= wahr\$1 DeriveKey |
| GenerateCardData | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E6\$1EMV\$1MKEY\$1ANDERE | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1= wahr\$1 DeriveKey |
## VerifyCardData
| Kryptografischer Vorgang oder Algorithmus | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1C0\$1KARTENÜBERPRÜFUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1Generieren = wahr\$1, \$1Generieren = wahr, Überprüfen = wahr\$1 |
| [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1C0\$1CARD\$1VERIFICATION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1Generieren = wahr\$1, \$1Generieren = wahr, Überprüfen = wahr\$1 |
| [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E6\$1EMV\$1MKEY\$1SONSTIGES | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1= wahr\$1 DeriveKey |
| [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E4\$1EMV\$1MKEY\$1DYNAMISCHE\$1NUMBERS | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1= wahr\$1 DeriveKey |
| [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E6\$1EMV\$1MKEY\$1ANDERE | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | \$1= wahr\$1 DeriveKey |
## GeneratePinData (für VISA/ABA Schemata)
`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`
| Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| PIN-Verschlüsselungsschlüssel | TR31\$1P0\$1PIN\$1ENCRYPTION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Schlüssel zur PIN-Generierung | TR31\$1V2\$1VISA\$1PIN\$1VERIFICATION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## GeneratePinData (für`IBM3624`)
`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`
| Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| PIN-Verschlüsselungsschlüssel | TR31\$1P0\$1PIN\$1ENCRYPTION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | Für IBM3624 \$1NATURAL\$1PIN, \$1RANDOM\$1PIN, \$1PIN\$1FROM\$1OFFSET IBM3624 IBM3624 [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) Für IBM3624 \$1PIN\$1OFFSET [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Schlüssel zur PIN-Generierung | TR31\$1V1\$1 \$1PIN\$1VERIFICATION\$1KEY IBM3624 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## VerifyPinData (für VISA/ABA Schemata)
`VISA_PIN`
| Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| PIN-Verschlüsselungsschlüssel | TR31\$1P0\$1PIN\$1ENCRYPTION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Schlüssel zur PIN-Generierung | TR31\$1V2\$1VISA\$1PIN\$1VERIFICATION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## VerifyPinData (für`IBM3624`)
`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`
| Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| PIN-Verschlüsselungsschlüssel | TR31\$1P0\$1PIN\$1ENCRYPTION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | Für IBM3624 \$1NATURAL\$1PIN, \$1RANDOM\$1PIN, \$1PIN\$1FROM\$1OFFSET IBM3624 IBM3624 [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| PIN-Bestätigungsschlüssel | TR31\$1V1\$1 \$1PIN\$1VERIFICATION\$1KEY IBM3624 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## Daten entschlüsseln
| Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| DUMPT | TR31\$1B0\$1BASISABLEITUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| EMV | TR31\$1E1\$1EMV\$1MKEY\$1VERTRAULICHKEIT TR31\$1E6\$1EMV\$1MKEY\$1ANDERE | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| RSA | TR31\$1D1\$1ASYMMETRISCHER\$1SCHLÜSSEL\$1FÜR\$1DATENVERSCHLÜSSELUNG | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Symmetrische Schlüssel | TR31\$1D0\$1SYMMETRISCHER\$1DATENVERSCHLÜSSELUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## Encrypt Data
| Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| DUMPT | TR31\$1B0\$1BASISABLEITUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| EMV | TR31\$1E1\$1EMV\$1MKEY\$1VERTRAULICHKEIT TR31\$1E6\$1EMV\$1MKEY\$1ANDERE | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| RSA | TR31\$1D1\$1ASYMMETRISCHER\$1SCHLÜSSEL\$1FÜR\$1DATENVERSCHLÜSSELUNG | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Symmetrische Schlüssel | TR31\$1D0\$1SYMMETRISCHER\$1DATENVERSCHLÜSSELUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## Translate Pin Data
| Richtung | Schlüsseltyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- | --- |
| Eingehende Datenquelle | DEPUTIERT | TR31\$1B0\$1BASISABLEITUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Eingehende Datenquelle | Unmanipuliert (PEK, AWK, IWK usw.) | TR31\$1P0\$1PIN\$1VERSCHLÜSSELUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Ziel für ausgehende Daten | DUPT | TR31\$1B0\$1BASISABLEITUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Ziel für ausgehende Daten | Nicht dedupt (PEK, IWK, AWK usw.) | TR31\$1P0\$1PIN\$1VERSCHLÜSSELUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## MAC generieren/verifizieren
MAC-Schlüssel werden zum Erstellen kryptografischer Hashes von Daten verwendet. message/body Es wird nicht empfohlen, einen Schlüssel mit eingeschränkten Verwendungsmöglichkeiten zu erstellen, da Sie den Abgleichvorgang dann nicht durchführen können. Sie können jedoch import/export einen Schlüssel mit nur einer Operation verwenden, wenn das andere System die andere Hälfte des Operationspaares ausführen soll.
| Zulässige Verwendung von Schlüsseln | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| MAC-Schlüssel | TR31\$1M1\$1ISO\$19797\$11\$1MAC\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| MAC-Schlüssel (MAC für den Einzelhandel) | TR31\$1M1\$1ISO\$19797\$13\$1MAC\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| MAC-Schlüssel (CMAC) | TR31\$1M6\$1ISO\$19797\$15\$1CMAC\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| MAC-Schlüssel (HMAC) | TR31\$1M7\$1HMAC-SCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| MAC-Schlüssel (AS2805) | TR31\$1M0\$1ISO\$116609\$1MAC\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## GenerateMacEmvPinChange
GenerateMacEmvPinChange kombiniert MAC-Generierung und PIN-Verschlüsselung für EMV-Offline-PIN-Änderungsvorgänge. Für diesen Vorgang sind zwei verschiedene Schlüsseltypen erforderlich: ein Integritätsschlüssel für die MAC-Generierung und ein Vertraulichkeitsschlüssel für die PIN-Verschlüsselung.
| Schlüsseltyp | Zulässige Schlüsselverwendung | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| Integritätsschlüssel für sicheres Messaging | TR31\$1E2\$1EMV\$1MKEY\$1INTEGRITY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Schlüssel zur Vertraulichkeit von Secure Messaging | TR31\$1E1\$1EMV\$1MKEY\$1CONFIDENTIALITY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Aktuelle PIN PEK (PIN-Verschlüsselungsschlüssel) | TR31\$1P0\$1PIN\$1ENCRYPTION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Neue PIN PEK (PIN-Verschlüsselungsschlüssel) | TR31\$1P0\$1PIN\$1ENCRYPTION\$1KEY | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| ARQC-Schlüssel Gilt nur für Visa- und Amex-Ableitungssysteme. | TR31\$1E0\$1EMV\$1MKEY\$1APP\$1CRYPTOGRAMS | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## VerifyAuthRequestCryptogram
| Zulässige Verwendung von Schlüsseln | EMV-Option | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | TR31\$1E0\$1EMV\$1MKEY\$1APP\$1CRYPTOGRAMS | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## Schlüssel Import/Export
| Vorgangstyp | Zulässige Verwendung von Schlüsseln | Zulässiger Schlüsselalgorithmus | Zulässige Kombination der wichtigsten Nutzungsmodi |
| --- | --- | --- | --- |
| TR-31 Wickelschlüssel | TR31\$1K1\$1KEY\$1BLOCK\$1PROTECTION\$1KEY TR31\$1K0\$1KEY\$1VERSCHLÜSSELUNGSSCHLÜSSEL | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Import einer vertrauenswürdigen CA | TR31\$1S0\$1ASYMMETRIC\$1KEY\$1FOR\$1DIGITAL\$1SIGNATURE | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Import eines Public-Key-Zertifikats für asymmetrische Verschlüsselung | TR31\$1D1\$1ASYMMETRISCHER\$1SCHLÜSSEL\$1FÜR\$1DATENVERSCHLÜSSELUNG | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
| Schlüssel, der für wichtige Vereinbarungsalgorithmen wie ECDH verwendet wird | TR31\$1K3\$1ASYMMETRIC\$1KEY\$1FOR\$1KEY\$1AGREEMENT | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/de_de/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) |
## Unbenutzte Schlüsseltypen
Die folgenden Schlüsseltypen werden derzeit nicht von AWS Payment Cryptography verwendet
+ TR31\$1P1\$1PIN\$1GENERATION\$1KEY