기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.

# 암호화 작업을 위한 유효한 키
<a name="crypto-ops-validkeys-ops"></a>

특정 키는 특정 작업에만 사용할 수 있습니다. 또한 일부 작업에서는 키의 키 사용 모드가 제한될 수 있습니다. 허용되는 조합은 다음 표를 참조하세요.

**참고**  
특정 조합이 허용되더라도 CVV 코드 `(generate)`를 생성한 후 이를 확인할 수 없는 `(verify)`와 같이 사용할 수 없는 상황을 만들 수 있습니다.

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData(VISA/ABA 체계용)](#w2aac15c31c15)
+ [GeneratePinData(`IBM3624`용)](#w2aac15c31c17)
+ [VerifyPinData(비자/ABA 체계용)](#w2aac15c31c21)
+ [VerifyPinData(`IBM3624`용)](#w2aac15c31c23)
+ [데이터 해독](#w2aac15c31c27)
+ [데이터 암호화](#w2aac15c31c33)
+ [PIN 데이터 변환](#w2aac15c31c39)
+ [MAC 생성/확인](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [가져오기/내보내기 키](#crypto-ops-validkeys.importexport)
+ [미사용 키 유형](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| API 엔드포인트 | 암호화 연산 또는 알고리즘 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| 암호화 연산 또는 알고리즘 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 

## GeneratePinData(VISA/ABA 체계용)
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| PIN 암호화 키 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 생성 키 | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GeneratePinData(`IBM3624`용)
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| PIN 암호화 키 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | IBM3624\_NATURAL\_PIN, IBM3624\_RANDOM\_PIN, IBM3624\_PIN\_FROM\_OFFSET의 경우[See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)<br />IBM 3624\_PIN\_OFFSET의 경우[See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 생성 키 | TR31\_V1\_IBM3624\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData(비자/ABA 체계용)
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| PIN 암호화 키 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 생성 키 | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData(`IBM3624`용)
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| PIN 암호화 키 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | IBM3624\_NATURAL\_PIN, IBM3624\_RANDOM\_PIN, IBM3624\_PIN\_FROM\_OFFSET의 경우[See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 확인 키 | TR31\_V1\_IBM3624\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 데이터 해독
<a name="w2aac15c31c27"></a>


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 대칭 키 | TR31\_D0\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 데이터 암호화
<a name="w2aac15c31c33"></a>


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 대칭 키 | TR31\_D0\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## PIN 데이터 변환
<a name="w2aac15c31c39"></a>


| Direction | 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | --- | 
| 인바운드 데이터 소스 | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 인바운드 데이터 소스 | 비 DUKPT(PEK, AWK, IWK 등) | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 아웃바운드 데이터 대상 | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 아웃바운드 데이터 대상 | 비 DUKPT(PEK, IWK, AWK 등) | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## MAC 생성/확인
<a name="crypto-ops-validkeys.generatemac"></a>

 MAC 키는 메시지/데이터 본문의 암호화 해시를 생성하는 데 사용됩니다. 매칭 작업을 수행할 수 없으므로 키 사용 모드가 제한된 키를 생성하는 것은 권장되지 않습니다. 그러나 다른 시스템이 작업 페어의 나머지 절반을 수행하려는 경우 하나의 작업으로만 키를 가져오거나 내보낼 수 있습니다.


| 허용된 키 사용 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| MAC 키  | TR31\_M1\_ISO\_9797\_1\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 키(소매 MAC)  | TR31\_M1\_ISO\_9797\_3\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 키(CMAC)  | TR31\_M6\_ISO\_9797\_5\_CMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 키(HMAC)  | TR31\_M7\_HMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 키(AS2805)  | TR31\_M0\_ISO\_16609\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange는 EMV 오프라인 PIN 변경 작업을 위한 MAC 생성 및 PIN 암호화를 결합합니다. 이 작업에는 MAC 생성을 위한 무결성 키와 PIN 암호화를 위한 기밀성 키라는 두 가지 키 유형이 필요합니다.


| 키 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| 보안 메시징 무결성 키  | TR31\_E2\_EMV\_MKEY\_INTEGRITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 보안 메시징 기밀 키  | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 현재 PIN PEK(PIN 암호화 키)  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 새 PIN PEK(PIN 암호화 키)  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| ARQC 키  Visa 및 Amex 파생 체계에만 적용됩니다.  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| 허용된 키 사용 | EMV 옵션 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 가져오기/내보내기 키
<a name="crypto-ops-validkeys.importexport"></a>


| 작업 유형 | 허용된 키 사용 | 허용된 키 알고리즘 | 허용된 키 사용 모드 조합 | 
| --- | --- | --- | --- | 
| TR-31 래핑 키 | TR31\_K1\_KEY\_BLOCK\_PROTECTION\_KEY<br />TR31\_K0\_KEY\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 신뢰할 수 있는 CA 가져오기 | TR31\_S0\_ASYMMETRIC\_KEY\_FOR\_DIGITAL\_SIGNATURE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 비대칭 암호화를 위한 퍼블릭 키 인증서 가져오기 | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| ECDH와 같은 주요 계약 알고리즘에 사용되는 키 | TR31\_K3\_ASYMMETRIC\_KEY\_FOR\_KEY\_AGREEMENT |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/ko_kr/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 미사용 키 유형
<a name="w2aac15c31c57"></a>

다음 키 유형은 현재 AWS Payment Cryptography에서 사용되지 않습니다.
+  TR31\_P1\_PIN\_GENERATION\_KEY