Las traducciones son generadas a través de traducción automática. En caso de conflicto entre la traducción y la version original de inglés, prevalecerá la version en inglés.

# Claves válidas para las operaciones criptográficas
<a name="crypto-ops-validkeys-ops"></a>

Algunas claves solo se pueden utilizar para determinadas operaciones. Además, algunas operaciones pueden limitar los modos de uso de las claves. Consulte la tabla siguiente para las combinaciones permitidas. 

**nota**  
Ciertas combinaciones, si bien están permitidas, pueden crear situaciones inutilizables, como generar códigos CVV `(generate)` pero luego no pueden verificarlos `(verify)`. 

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData (para VISA/ABA esquemas)](#w2aac15c31c15)
+ [GeneratePinData (para) `IBM3624`](#w2aac15c31c17)
+ [VerifyPinData (para esquemas) VISA/ABA](#w2aac15c31c21)
+ [VerifyPinData (para) `IBM3624`](#w2aac15c31c23)
+ [Descifrado de datos](#w2aac15c31c27)
+ [Cifrado de datos](#w2aac15c31c33)
+ [Traducir datos PIN](#w2aac15c31c39)
+ [Generar/verificar el MAC](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [Clave de Importación/Exportación](#crypto-ops-validkeys.importexport)
+ [Tipos de claves sin utilizar](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| Punto de conexión de la API | Operación criptográfica o algoritmo | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_KEY\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_CLAVE DE VERIFICACIÓN |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {= verdadero} DeriveKey  | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {= verdadero} DeriveKey  | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {= verdadero} DeriveKey  | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| Operación criptográfica o algoritmo | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_CLAVE DE VERIFICACIÓN |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_CLAVE DE VERIFICACIÓN |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {= verdadero} DeriveKey  | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {= verdadero} DeriveKey  | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {= verdadero} DeriveKey  | 

## GeneratePinData (para VISA/ABA esquemas)
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Clave de cifrado de PIN | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave de generación de PIN | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GeneratePinData (para) `IBM3624`
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Clave de cifrado de PIN | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | Para \_NATURAL\_PIN, \_RANDOM\_PIN, \_PIN\_FROM\_OFFSET IBM3624 IBM3624 IBM3624[See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)<br />Para IBM3624 \_PIN\_OFFSET[See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave de generación de PIN | TR31\_V1\_ \_PIN\_CLAVE DE VERIFICACIÓN IBM3624 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (para esquemas) VISA/ABA
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Clave de cifrado de PIN | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave de generación de PIN | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (para) `IBM3624`
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Clave de cifrado de PIN | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | Para \_NATURAL\_PIN, \_RANDOM\_PIN, \_PIN\_FROM\_OFFSET IBM3624 IBM3624 IBM3624[See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave de verificación de PIN | TR31\_V1\_ \_PIN\_CLAVE DE VERIFICACIÓN IBM3624 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Descifrado de datos
<a name="w2aac15c31c27"></a>


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_CLAVE DE DERIVACIÓN BASE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENCIALIDAD<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_CLAVE ASIMÉTRICA PARA EL CIFRADO DE DATOS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Claves simétricas | TR31\_D0\_KEY\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Cifrado de datos
<a name="w2aac15c31c33"></a>


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_CLAVE DE DERIVACIÓN |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENCIALIDAD<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_CLAVE ASIMÉTRICA PARA EL CIFRADO DE DATOS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Claves simétricas | TR31\_D0\_KEY\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Traducir datos PIN
<a name="w2aac15c31c39"></a>


| Dirección | Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | --- | 
| Origen de datos de entrada | DUKPT | TR31\_B0\_BASE\_CLAVE DE DERIVACIÓN |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Origen de datos de entrada | no DUKPT (PEK, AWK, IWK, etc.) | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Objetivo de datos de salida | DUKPT | TR31\_B0\_BASE\_CLAVE DE DERIVACIÓN |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Objetivo de datos de salida | no DUKPT (PEK, IWK, AWK, etc) | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Generar/verificar el MAC
<a name="crypto-ops-validkeys.generatemac"></a>

 Las claves MAC se utilizan para crear hashes criptográficos de varios datos. message/body No se recomienda crear una clave con modos de uso de claves limitados, ya que no podrá realizar la operación de coincidencia. Sin embargo, puede import/export utilizar una clave con una sola operación si el otro sistema está diseñado para realizar la otra mitad del par de operaciones. 


| Uso permitido de claves | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Clave MAC  | TR31\_M1\_ISO\_9797\_1\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave MAC (MAC minorista)  | TR31\_M1\_ISO\_9797\_3\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave MAC (CMAC)  | TR31\_M6\_ISO\_9797\_5\_CMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave MAC (HMAC)  | TR31\_M7\_HMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Tecla MAC () AS2805  | TR31\_M0\_ISO\_16609\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange combina la generación de MAC y el cifrado de PIN para las operaciones de cambio de PIN fuera de línea de EMV. Esta operación requiere dos tipos de claves diferentes: una clave de integridad para la generación de MAC y una clave de confidencialidad para el cifrado de PIN. 


| Tipo de clave | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Clave de integridad de mensajería segura  | TR31\_E2\_EMV\_MKEY\_INTEGRITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave de confidencialidad de mensajería segura  | TR31\_E1\_EMV\_MKEY\_CONFIDENCIALITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN PEK (clave de cifrado PIN) actual  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Nuevo PIN PEK (clave de cifrado PIN)  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave ARQC  Solo se aplica a los esquemas de derivación de Visa y Amex.  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| Uso permitido de claves | Opción EMV | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Clave de Importación/Exportación
<a name="crypto-ops-validkeys.importexport"></a>


| Operation Type (Tipo de operación) | Uso permitido de claves | Algoritmo clave permitido | Combinación permitida de modos de uso clave | 
| --- | --- | --- | --- | 
| Llave de embalaje TR-31 | TR31\_K1\_KEY\_BLOCK\_PROTECTION\_KEY<br />TR31\_K0\_KEY\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Importación de una CA de confianza | TR31\_S0\_CLAVE ASIMÉTRICA PARA FIRMA DIGITAL |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Importación de un certificado de clave pública para el cifrado asimétrico | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Clave utilizada para algoritmos de acuerdo de claves como el ECDH | TR31\_K3\_ASYMMETRIC\_KEY\_FOR\_KEY\_AGREEMENT |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/es_es/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Tipos de claves sin utilizar
<a name="w2aac15c31c57"></a>

La criptografía de AWS pagos no utiliza actualmente los siguientes tipos de claves
+  TR31\_P1\_PIN\_GENERATION\_KEY