

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# 密碼編譯操作的有效金鑰
<a name="crypto-ops-validkeys-ops"></a>

某些金鑰只能用於某些操作。此外，某些操作可能會限制金鑰使用的金鑰模式。如需允許的組合，請參閱下表。

**注意**  
雖然允許，某些組合可能會產生無法使用的情況，例如產生 CVV 代碼`(generate)`，但無法驗證它們`(verify)`。

**Topics**
+ [GenerateCardData](#w2aac15c31b9)
+ [VerifyCardData](#w2aac15c31c11)
+ [GeneratePinData （適用於 VISA/ABA 配置）](#w2aac15c31c15)
+ [GeneratePinData （適用於 `IBM3624`)](#w2aac15c31c17)
+ [VerifyPinData （適用於 VISA/ABA 配置）](#w2aac15c31c21)
+ [VerifyPinData （適用於 `IBM3624`)](#w2aac15c31c23)
+ [解密資料](#w2aac15c31c27)
+ [加密資料](#w2aac15c31c33)
+ [翻譯 PIN 資料](#w2aac15c31c39)
+ [產生/驗證 MAC](#crypto-ops-validkeys.generatemac)
+ [GenerateMacEmvPinChange](#crypto-ops-validkeys.generatemacemvpinchange)
+ [VerifyAuthRequestCryptogram](#w2aac15c31c51)
+ [匯入/匯出金鑰](#crypto-ops-validkeys.importexport)
+ [未使用的金鑰類型](#w2aac15c31c57)

## GenerateCardData
<a name="w2aac15c31b9"></a>


| API 端點 | 密碼編譯操作或演算法 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | --- | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true }，{ Generate = true， Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true }，{ Generate = true， Verify = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
| GenerateCardData |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 

## VerifyCardData
<a name="w2aac15c31c11"></a>


| 密碼編譯操作或演算法 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true }，{ Generate = true， Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_C0\_CARD\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { Generate = true }，{ Generate = true， Verify = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E4\_EMV\_MKEY\_DYNAMIC\_NUMBERS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | { DeriveKey = true } | 

## GeneratePinData （適用於 VISA/ABA 配置）
<a name="w2aac15c31c15"></a>

`VISA_PIN or VISA_PIN_VERIFICATION_VALUE`


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| PIN 加密金鑰 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 產生金鑰 | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GeneratePinData （適用於 `IBM3624`)
<a name="w2aac15c31c17"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| PIN 加密金鑰 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 對於 IBM3624\_NATURAL\_PIN、IBM3624\_RANDOM\_PIN、IBM3624\_PIN\_FROM\_OFFSET[See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)<br />對於 IBM3624\_PIN\_OFFSET[See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 產生金鑰 | TR31\_V1\_IBM3624\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData （適用於 VISA/ABA 配置）
<a name="w2aac15c31c21"></a>

`VISA_PIN`


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| PIN 加密金鑰 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 產生金鑰 | TR31\_V2\_VISA\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyPinData （適用於 `IBM3624`)
<a name="w2aac15c31c23"></a>

`IBM3624_PIN_OFFSET,IBM3624_NATURAL_PIN,IBM3624_RANDOM_PIN, IBM3624_PIN_FROM_OFFSET)`


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| PIN 加密金鑰 | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 對於 IBM3624\_NATURAL\_PIN、IBM3624\_RANDOM\_PIN、IBM3624\_PIN\_FROM\_OFFSET[See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| PIN 驗證金鑰 | TR31\_V1\_IBM3624\_PIN\_VERIFICATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 解密資料
<a name="w2aac15c31c27"></a>


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 對稱金鑰 | TR31\_D0\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 加密資料
<a name="w2aac15c31c33"></a>


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| EMV | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY<br />TR31\_E6\_EMV\_MKEY\_OTHER |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | 
| RSA | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 對稱金鑰 | TR31\_D0\_SYMMETRIC\_DATA\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 翻譯 PIN 資料
<a name="w2aac15c31c39"></a>


| Direction | 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | --- | 
| 傳入資料來源 | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 傳入資料來源 | 非DUKPT (PEK、AWK、IWK 等） | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 傳出資料目標 | DUKPT | TR31\_B0\_BASE\_DERIVATION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 傳出資料目標 | 非DUKPT (PEK、IWK、AWK 等） | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 產生/驗證 MAC
<a name="crypto-ops-validkeys.generatemac"></a>

 MAC 金鑰用於建立訊息/資料主體的密碼編譯雜湊。不建議建立金鑰模式有限的金鑰，因為您無法執行相符的操作。不過，如果另一個系統打算執行操作對的另一半，您可以匯入/匯出只有一個操作的金鑰。


| 允許的金鑰用量 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| MAC 金鑰  | TR31\_M1\_ISO\_9797\_1\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 金鑰 （零售 MAC)  | TR31\_M1\_ISO\_9797\_3\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 金鑰 (CMAC)  | TR31\_M6\_ISO\_9797\_5\_CMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 金鑰 (HMAC)  | TR31\_M7\_HMAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| MAC 金鑰 (AS2805)  | TR31\_M0\_ISO\_16609\_MAC\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## GenerateMacEmvPinChange
<a name="crypto-ops-validkeys.generatemacemvpinchange"></a>

 GenerateMacEmvPinChange 結合了 EMV 離線 PIN 變更操作的 MAC 產生和 PIN 加密。此操作需要兩種不同的金鑰類型：MAC 產生的完整性金鑰和 PIN 加密的機密性金鑰。


| 金鑰類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| 安全訊息完整性金鑰  | TR31\_E2\_EMV\_MKEY\_INTEGRITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 安全傳訊機密性金鑰  | TR31\_E1\_EMV\_MKEY\_CONFIDENTIALITY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 目前的 PIN PEK (PIN 加密金鑰）  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 新的 PIN PEK (PIN 加密金鑰）  | TR31\_P0\_PIN\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| ARQC 金鑰  僅適用於 Visa 和 Amex 衍生方案。  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## VerifyAuthRequestCryptogram
<a name="w2aac15c31c51"></a>


| 允許的金鑰用量 | EMV 選項 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
|  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  | TR31\_E0\_EMV\_MKEY\_APP\_CRYPTOGRAMS |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 匯入/匯出金鑰
<a name="crypto-ops-validkeys.importexport"></a>


| 操作類型 | 允許的金鑰用量 | 允許的金鑰演算法 | 允許的金鑰使用模式組合 | 
| --- | --- | --- | --- | 
| TR-31 包裝金鑰 | TR31\_K1\_KEY\_BLOCK\_PROTECTION\_KEY<br />TR31\_K0\_KEY\_ENCRYPTION\_KEY |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 匯入信任的 CA | TR31\_S0\_ASYMMETRIC\_KEY\_FOR\_DIGITAL\_SIGNATURE |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 匯入用於非對稱加密的公有金鑰憑證 | TR31\_D1\_ASYMMETRIC\_KEY\_FOR\_DATA\_ENCRYPTION |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 
| 用於金鑰協議演算法的金鑰，例如 ECDH | TR31\_K3\_ASYMMETRIC\_KEY\_FOR\_KEY\_AGREEMENT |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html)  |  [See the AWS documentation website for more details](http://docs.aws.amazon.com/zh_tw/payment-cryptography/latest/userguide/crypto-ops-validkeys-ops.html) | 

## 未使用的金鑰類型
<a name="w2aac15c31c57"></a>

 AWS 付款密碼編譯目前未使用下列金鑰類型
+  TR31\_P1\_PIN\_GENERATION\_KEY 