翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。

# 暗号化オペレーション用の検証キー
<a name="crypto-ops-validkeys-ops"></a>

特定のキーは特定のオペレーションにのみ使用できます。また、オペレーションによってはキーを使用できるキーモードが制限される場合があります。以下の許可される組み合わせの説明をご覧ください。

**注記**  
組み合わせによっては許可されているものの、CVV コード `(generate)` を生成しても検証できないなど、使用できない状況が生じる場合があります。`(verify)`

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [PIN データを生成 (VISA/ABA スキーム用)](#w2aac15c31c15)
+ [PIN データを生成 (用) `IBM3624`](#w2aac15c31c17)
+ [VerifyPinData (ビザ/ABA スキーム用)](#w2aac15c31c21)
+ [VerifyPinData (`IBM3624` 用)](#w2aac15c31c23)
+ [データを復号化する](#w2aac15c31c27)
+ [データを暗号化する](#w2aac15c31c33)
+ [PIN データ変換](#w2aac15c31c39)
+ [MAC の生成/検証](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [インポート/エクスポートキー](#crypto-ops-validkeys.importexport)
+ [使用されていないキーのタイプ](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| API エンドポイント | 暗号化オペレーションまたはアルゴリズム | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {DeriveKey = true} | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {DeriveKey = true} | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {DeriveKey = true} | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| 暗号化オペレーションまたはアルゴリズム | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {DeriveKey = true} | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {DeriveKey = true} | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | {DeriveKey = true} | 

## PIN データを生成 (VISA/ABA スキーム用)
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| PIN 暗号化キー | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 生成キー | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## PIN データを生成 (用) `IBM3624`
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| PIN 暗号化キー | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | IBM 3624\_NATURAL\_PIN、IBM 3624\_RANDOM\_PIN、IBM 3624\_PIN\_FROM\_OFFSET 用[See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)<br />IBM 3624\_PIN\_OFFSET 用[See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 生成キー | TR31\_V1\_IBM3624\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (ビザ/ABA スキーム用)
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| PIN 暗号化キー | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 生成キー | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (`IBM3624` 用)
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| PIN 暗号化キー | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | IBM 3624\_NATURAL\_PIN、IBM 3624\_RANDOM\_PIN、IBM 3624\_PIN\_FROM\_OFFSET 用[See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 検証キー | TR31\_V1\_IBM3624\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## データを復号化する
<a name="w2aac15c31c27"></a>


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 対称キー | TR31\_D0\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## データを暗号化する
<a name="w2aac15c31c33"></a>


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 対称キー | TR31\_D0\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## PIN データ変換
<a name="w2aac15c31c39"></a>


| Direction | キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | --- | 
| インバウンドデータソース | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| インバウンドデータソース | DUKPT以外 (PEK、AWK、IWK など) | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| アウトバウンドデータターゲット | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| アウトバウンドデータターゲット | DUKPT以外 (PEK、IWK、AWK など) | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## MAC の生成/検証
<a name="crypto-ops-validkeys.generatemac"></a>

 MAC キーは、メッセージ/データ本文の暗号化ハッシュを作成するために使用されます。一致するオペレーションを実行できないため、キーモードが制限されたキーを作成することはお勧めしません。ただし、他のシステムがオペレーションペアの残りの半分を実行することを意図している場合、1 つのオペレーションのみでキーをインポート/エクスポートできます。


| 許可されたキーの使用 | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| MAC キー  | TR31\_M1\_ISO\_9797\_1\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC キー (小売 MAC)  | TR31\_M1\_ISO\_9797\_3\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC キー (CMAC)  | TR31\_M6\_ISO\_9797\_5\_CMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC キー (HMAC)  | TR31\_M7\_HMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC キー (AS2805)  | TR31\_M0\_ISO\_16609\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange は、EMV オフライン PIN 変更オペレーションの MAC 生成と PIN 暗号化を組み合わせます。このオペレーションには、MAC 生成用の整合性キーと PIN 暗号化用の機密性キーの 2 つの異なるキータイプが必要です。


| キータイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| Secure Messaging Integrity キー  | TR31\_E2\_EMV\_MKEY\_INTEGRITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Secure Messaging の機密性キー  | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 現在の PIN PEK (PIN 暗号化キー)  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 新しい PIN PEK (PIN 暗号化キー)  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| ARQC キー  Visa および Amex 取得スキームにのみ適用されます。  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| 許可されたキーの使用 | EMV オプション | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## インポート/エクスポートキー
<a name="crypto-ops-validkeys.importexport"></a>


| オペレーションのタイプ | 許可されたキーの使用 | 許可されたキーアルゴリズム | 許可されたキーモードの組み合わせ | 
| --- | --- | --- | --- | 
| TR-31 ラップキー | TR31\_K1\_KEY\_BLOCK\_PROTECTION\_KEY<br />TR31\_K0\_KEY\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 信頼された CA のインポート | TR31\_S0\_ASYMMETRIC\_KEY\_FOR\_DIGITAL\_SIGNATURE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 非対称暗号化用のパブリックキー証明書のインポート | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| ECDH などのキーアグリーメントアルゴリズムに使用されるキー | TR31\_K3\_ASYMMETRIC\_KEY\_FOR\_KEY\_AGREEMENT |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ja_jp/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 使用されていないキーのタイプ
<a name="w2aac15c31c57"></a>

以下のキータイプは現在 AWS Payment Cryptography では使用されていません
+  TR31\_P1\_PIN\_GENERATION\_KEY