匯出工作金鑰

為了維持與其他方的相容性， AWS 付款密碼編譯支援 AS2805 對稱金鑰包裝技術，這些技術使用金鑰變體，而不是 TR-31 等金鑰區塊。如果各方之間共用多個金鑰，則每個金鑰都應個別匯出。如果資料是雙向傳送，則相同類型的各方之間可能會有兩個金鑰，例如 ZAK(s) 和 ZAK(r)，由每一端用來產生訊息驗證碼。

要以這些格式匯入和匯出的其他參數會在命令上指定。

cat >> export-zone-pin-key.json 
{
    "ExportKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/alsuwfxug3pgy6xh",
    "KeyMaterial": {
        "As2805KeyCryptogram": {
            "WrappingKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/rhfm6tenpxapkmrv",
            "As2805KeyVariant: "PIN_ENCRYPTION_KEY_VARIANT_28"
        }
    }
}

$ aws payment-cryptography-data export-key --cli-input-json file://export-zone-pin-key.json --region ap-southeast-2

{
    "WrappedKey": {
        "KeyCheckValue": "DC1081",
        "KeyCheckValueAlgorithm": "ANSI_X9_24",
        "KeyMaterial": "HDC10AEF038E695DDD72AF08DC1BB422D",
        "WrappedKeyMaterialFormat": "KEY_CRYPTOGRAM",
        "WrappingKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/rhfm6tenpxapkmrv"
    }
}