

本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 加密操作的有效密钥
<a name="crypto-ops-validkeys-ops"></a>

某些密钥只能用于某些操作。此外，某些操作可能会限制密钥的密钥使用模式。请查看下表中允许的组合。

**注意**  
某些组合虽然允许，但可能会造成无法使用的情况，例如生成 CVV 代码`(generate)`但随后无法验证`(verify)`。

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData （适用于 VISA/ABA 计划）](#w2aac15c31c15)
+ [GeneratePinData （对于`IBM3624`）](#w2aac15c31c17)
+ [VerifyPinData （适用于 VISA/ABA 计划）](#w2aac15c31c21)
+ [VerifyPinData （对于`IBM3624`）](#w2aac15c31c23)
+ [解密数据](#w2aac15c31c27)
+ [加密数据](#w2aac15c31c33)
+ [转换 PIN 数据](#w2aac15c31c39)
+ [生成/验证 MAC](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [Import/Export 密钥](#crypto-ops-validkeys.importexport)
+ [未使用的密钥类型](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| API 端点 | 加密操作或算法 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = 真} | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = 真} | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = 真} | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| 加密操作或算法 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true },{ Generate = true, Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = 真} | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = 真} | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = 真} | 

## GeneratePinData （适用于 VISA/ABA 计划）
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| KMS 加密密钥 | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 生成密钥 | TR31\_V2\_VISA\_PIN\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GeneratePinData （对于`IBM3624`）
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| KMS 加密密钥 | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 对于 IBM3624 \_NATURAL\_PIN、\_RANDOM\_PIN、\_PIN\_FROM\_OFFSET IBM3624 IBM3624[See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)<br />适用于 IBM3624 \_PIN\_OFFSET[See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 生成密钥 | TR31\_V1\_ \_PIN\_VERIFICATION\_KEY IBM3624 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData （适用于 VISA/ABA 计划）
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| KMS 加密密钥 | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 生成密钥 | TR31\_V2\_VISA\_PIN\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData （对于`IBM3624`）
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| KMS 加密密钥 | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 对于 IBM3624 \_NATURAL\_PIN、\_RANDOM\_PIN、\_PIN\_FROM\_OFFSET IBM3624 IBM3624[See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 验证密钥 | TR31\_V1\_ \_PIN\_VERIFICATION\_KEY IBM3624 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 解密数据
<a name="w2aac15c31c27"></a>


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_mkey\_机密<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_用于数据加密的非对称密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 对称密钥 | TR31\_D0\_SYMMETRIC\_DATA\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 加密数据
<a name="w2aac15c31c33"></a>


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_mkey\_机密<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_用于数据加密的非对称密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 对称密钥 | TR31\_D0\_SYMMETRIC\_DATA\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 转换 PIN 数据
<a name="w2aac15c31c39"></a>


| 方向 | 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | --- | 
| 入站数据来源 | DUKPT | TR31\_B0\_BASE\_DERIATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 入站数据来源 | 非 DUKPT（PEK、AWK、IWK 等） | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 出站数据目标 | DUKPT | TR31\_B0\_BASE\_DERIATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 出站数据目标 | 非 DUKPT（PEK、IWK、AWK 等） | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 生成/验证 MAC
<a name="crypto-ops-validkeys.generatemac"></a>

 MAC 密钥用于创建数据的加密哈希值 message/body 。不建议创建密钥使用模式有限的密钥，因为您将无法执行匹配操作。但是，如果另一个系统打算执行另一半的操作对，则可以 import/export 只使用一个操作来按键。


| 允许的密钥用法 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| MAC 密钥  | TR31\_M1\_ISO\_9797\_1\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 密钥（零售 MAC）  | TR31\_M1\_ISO\_9797\_3\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 密钥 (CMAC)  | TR31\_M6\_ISO\_9797\_5\_CMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 密钥 (HMAC)  | TR31\_m7\_HMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 密钥 (AS2805)  | TR31\_M0\_ISO\_16609\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange 结合了 MAC 生成和 PIN 加密，用于 EMV 离线 PIN 更改操作。此操作需要两种不同的密钥类型：用于生成 MAC 的完整性密钥和用于 PIN 加密的机密密钥。


| 密钥类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| 安全消息完整性密钥  | TR31\_E2\_EMV\_mkey\_INTEGRITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 安全消息保密密钥  | TR31\_E1\_EMV\_mkey\_机密 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 当前 PIN PEK（PIN 加密密钥）  | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 新的 PIN PEK（PIN 加密密钥）  | TR31\_P0\_PIN\_加密密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| ARQC 密钥  仅适用于Visa和美国运通的衍生方案。  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| 允许的密钥用法 | EMV 选项 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## Import/Export 密钥
<a name="crypto-ops-validkeys.importexport"></a>


| 操作类型 | 允许的密钥用法 | 允许的密钥算法 | 允许的密钥使用模式组合 | 
| --- | --- | --- | --- | 
| TR-31 包装钥匙 | TR31\_K1\_KEY\_BLOCK\_PROTECTION\_K<br />TR31\_K0\_KEY\_NECRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 导入可信 CA | TR31\_S0\_ASYMETRIC\_KEY\_FOR \_DIGITAL\_SIGNATURE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 导入用于非对称加密的公钥证书 | TR31\_D1\_用于数据加密的非对称密钥 |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 用于密钥协议算法（例如 ECDH）的密钥 | TR31\_K3\_ASYMETRIC\_KEY\_FOR \_KEY\_AGEMENT |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_cn/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 未使用的密钥类型
<a name="w2aac15c31c57"></a>

 AWS 支付密码学目前未使用以下密钥类型
+  TR31\_P1\_PIN\_GENERATION\_KEY 