As traduções são geradas por tradução automática. Em caso de conflito entre o conteúdo da tradução e da versão original em inglês, a versão em inglês prevalecerá.

# Chaves válidas para operações criptográficas
<a name="crypto-ops-validkeys-ops"></a>

Certas chaves podem ser usadas apenas para operações específicas. Além disso, algumas operações podem limitar os principais modos de uso das chaves. Consulte a tabela a seguir para ver as combinações permitidas. 

**nota**  
Certas combinações, embora permitidas, podem criar situações inutilizáveis, como gerar códigos CVV `(generate)`, mas não conseguir verificá-los `(verify)`. 

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData (para VISA/ABA esquemas)](#w2aac15c31c15)
+ [GeneratePinData (para`IBM3624`)](#w2aac15c31c17)
+ [VerifyPinData (para VISA/ABA esquemas)](#w2aac15c31c21)
+ [VerifyPinData (para`IBM3624`)](#w2aac15c31c23)
+ [Descriptografar dados](#w2aac15c31c27)
+ [Criptografar dados](#w2aac15c31c33)
+ [Traduzir dados de PIN](#w2aac15c31c39)
+ [Gerar/verificar MAC](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [Chave de importação/exportação](#crypto-ops-validkeys.importexport)
+ [Tipos de chave não utilizados](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| Endpoint de API | Operação criptográfica ou algoritmo | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CHAVE DE VERIFICAÇÃO DO CARTÃO |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CHAVE DE VERIFICAÇÃO DO CARTÃO |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OUTROS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = verdadeiro} | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = verdadeiro} | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OUTROS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = verdadeiro} | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| Operação criptográfica ou algoritmo | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CHAVE DE VERIFICAÇÃO DO CARTÃO |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CHAVE DE VERIFICAÇÃO DO CARTÃO |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OUTROS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = verdadeiro} | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = verdadeiro} | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OUTROS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = verdadeiro} | 

## GeneratePinData (para VISA/ABA esquemas)
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave de criptografia de PIN | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave de geração de PIN | TR31\_V2\_VISA\_PIN\_CHAVE DE VERIFICAÇÃO |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GeneratePinData (para`IBM3624`)
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave de criptografia de PIN | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | Para IBM3624 \_NATURAL\_PIN, \_RANDOM\_PIN, \_PIN\_FROM\_OFFSET IBM3624 IBM3624[See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)<br />Para IBM3624 \_PIN\_OFFSET[See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave de geração de PIN | TR31\_V1\_ \_PIN\_CHAVE DE VERIFICAÇÃO IBM3624 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (para VISA/ABA esquemas)
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave de criptografia de PIN | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave de geração de PIN | TR31\_V2\_VISA\_PIN\_CHAVE DE VERIFICAÇÃO |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData (para`IBM3624`)
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave de criptografia de PIN | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | Para IBM3624 \_NATURAL\_PIN, \_RANDOM\_PIN, \_PIN\_FROM\_OFFSET IBM3624 IBM3624[See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave de verificação de PIN | TR31\_V1\_ \_PIN\_CHAVE DE VERIFICAÇÃO IBM3624 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Descriptografar dados
<a name="w2aac15c31c27"></a>


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENCIALIDADE<br />TR31\_E6\_EMV\_MKEY\_OUTROS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_CHAVE\_ASSIMÉTRICA PARA CRIPTOGRAFIA DE DADOS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chaves simétricas | TR31\_D0\_CHAVE DE CRIPTOGRAFIA DE DADOS SIMÉTRICA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Criptografar dados
<a name="w2aac15c31c33"></a>


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENCIALIDADE<br />TR31\_E6\_EMV\_MKEY\_OUTROS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_CHAVE\_ASSIMÉTRICA PARA CRIPTOGRAFIA DE DADOS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chaves simétricas | TR31\_D0\_CHAVE DE CRIPTOGRAFIA DE DADOS SIMÉTRICA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Traduzir dados de PIN
<a name="w2aac15c31c39"></a>


| Direction | Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | --- | 
| Fonte de dados de entrada | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Fonte de dados de entrada | Não-DUKPT (PEK, AWK, IWK etc) | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Destino de dados de saída | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Destino de dados de saída | Não DUKPT (PEK, IWK, AWK etc) | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Gerar/verificar MAC
<a name="crypto-ops-validkeys.generatemac"></a>

 As chaves MAC são usadas para criar hashes criptográficos message/body de vários dados. Não é recomendável criar uma chave com modos de uso limitados, pois você não conseguirá realizar a operação correspondente. No entanto, você pode usar import/export uma chave com apenas uma operação se o outro sistema for destinado a executar a outra metade do par de operações. 


| Uso de chave permitido | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave MAC  | TR31\_M1\_ISO\_9797\_1\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave MAC (MAC de varejo)  | TR31\_M1\_ISO\_9797\_3\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave MAC (CMAC)  | TR31\_M6\_ISO\_9797\_5\_CHAVE CMAC |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave MAC (HMAC)  | TR31CHAVE \_M7\_HMAC |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave MAC (AS2805)  | TR31\_M0\_ISO\_16609\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange combina geração de MAC e criptografia de PIN para operações de alteração de PIN offline do EMV. Essa operação requer dois tipos de chave diferentes: uma chave de integridade para geração de MAC e uma chave de confidencialidade para criptografia de PIN. 


| Tipo de chave | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave de integridade de mensagens seguras  | TR31\_E2\_EMV\_MKEY\_INTEGRITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave de confidencialidade de mensagens seguras  | TR31\_E1\_EMV\_MKEY\_CONFIDENCIALIDADE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN PEK atual (chave de criptografia PIN)  | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Novo PIN PEK (chave de criptografia PIN)  | TR31\_P0\_PIN\_CHAVE DE CRIPTOGRAFIA |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave ARQC  Aplica-se apenas aos esquemas de derivação Visa e Amex.  | TR31\_E0\_EMV\_MKEY\_APP\_CRIPTOGRAMAS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| Uso de chave permitido | Opção de EMV | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E0\_EMV\_MKEY\_APP\_CRIPTOGRAMAS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Chave de importação/exportação
<a name="crypto-ops-validkeys.importexport"></a>


| Tipo de operação | Uso de chave permitido | Algoritmo de chave permitido | Combinação permitida dos principais modos de uso | 
| --- | --- | --- | --- | 
| Chave de embrulho TR-31 | TR31\_K1\_KEY\_BLOCK\_PROTECTION\_KEY<br />TR31\_K0\_KEY\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Importação de CA confiável | TR31\_S0\_CHAVE ASSIMÉTRICA PARA ASSINATURA DIGITAL |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Importação de certificado de chave pública para criptografia assimétrica | TR31\_D1\_CHAVE\_ASSIMÉTRICA PARA CRIPTOGRAFIA DE DADOS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| Chave usada para algoritmos de concordância chave, como ECDH | TR31\_K3\_CHAVE ASSIMÉTRICA POR ACORDO DE CHAVE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/pt_br/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Tipos de chave não utilizados
<a name="w2aac15c31c57"></a>

Os seguintes tipos de chave não são usados atualmente pela criptografia AWS de pagamento:
+  TR31\_P1\_PIN\_GENERATION\_KEY