Friday, October 3, 2014

Cryptogram calculation clarity for CBP

This is the key concept and change between EMV and what is required for CBP cryptograms.
Effectively the cryptogram in the CBP payment is created half in the cloud and then the other half when you tap the phone.

The reason for this is because the network connectivity may not allow a scenario like the left side of the diagram below as the UN would get cut off from transmitting from the POS to the calculation space, or it would be subject to network latency and create a "Tap and Hover" effect that would be an awful user experience.

The CBP cryptogram allows all components to be used as before and exposes a "relay threat" only to the android app after the SUK is received, but not to the POS terminal.   It also allows the Phase 2 calculation to happen independent of cloud availability at tap time.  The Phase 1 calculation and delivery to the phone from the cloud is expected to be preformed prior to tapping the phone, but not during the tap itself.

The thought is to offset the relay threat with in app security and sensor rich android OS.

It becomes a net neutral from a security standpoint really, IMO.


  1. Thanks for your post. I’ve been thinking about writing a very comparable post over the last couple of weeks, I’ll probably keep it short and sweet and link to this instead if thats cool. Thanks. do my pre calculus homework

  2. As obvious as this may be, many people still make the mistake of plagiarizing their work, intentionally or unintentionally. You must never plagiarise any content while writing a thesis, since this will really diminish your chances of getting acceptance. See more accounting formulas cheat sheet

  3. Replies
    1. Great Article
      Cyber Security Projects

      projects for cse

      Networking Security Projects

      JavaScript Training in Chennai

      JavaScript Training in Chennai

      The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

  4. CIITN is located in Prime location in Noida having best connectivity via all modes of public transport. CIITN offer both weekend and weekdays courses to facilitate Hadoop aspirants. Among all Hadoop Training Institute in Noida , CIITN's Big Data and Hadoop Certification course is designed to prepare you to match all required knowledge for real time job assignment in the Big Data world with top level companies. CIITN puts more focus in project based training and facilitated with Hadoop 2.7 with Cloud Lab—a cloud-based Hadoop environment lab setup for hands-on experience.

    CIITNOIDA is the good choice for Big Data Hadoop Training in NOIDA in the final year. I have also completed my summer training from here. It provides high quality Hadoop training with Live projects. The best thing about CIITNOIDA is its experienced trainers and updated course content. They even provide you placement guidance and have their own development cell. You can attend their free demo class and then decide.

    Hadoop Training in Noida
    Big Data Hadoop Training in Noida

  5. Aw, this was a really nice post. In idea I would like to put in writing like this additionally? Taking time and actual effort to make a very good article? But what can I say? I procrastinate a lot and by no means seem to get something done.
    drastic ds emulator apk download

  6. I'm shakshi.I am working in India top most Escort serviceEscort service in Mumbai.If u want to join the all facility of escortsEscort service in Bhubaneswar.pls call me & whatssapEscort service in Puri
    visit the sites.Escort service in Cuttack

  7. I recently came across your blog and have been reading along. I thought I would leave my first comment. I don't know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often. catasto genova

  8. If you have a Quickbooks Desktop and you are thinking about shifting to QBO then you should take assistance from Quickbooks Premier Support Number for better migration. They will assist you to import your files completely without losing data.

  9. QuickBooks provides accounting solution software which is available at different levels of business depending upon your needs.these software is easy to use and understandable. If while using it, you are facing any kind of issues then you can Contact QuickBooks Enterprise

  10. Are you writing an essay? Examine this persuasive essay outline and get tips for successful writing.

  11. Gay agreeable drug rehabs are drug rehabs who are commonly fit for tending to the requirements of the gay, lesbian, androgynous or transgender network. By gay benevolent, we allude to drug rehabs whose staff are prepared in the territories of homophobia, disguised homophobia, sexual direction, just as, have managed any their issues identifying with partiality, separation and distance.
    motivational quotes for addicts
    rehab quotes

  12. I found free pre written essays. I started ordering different learning materials. I often use an essay writing service. He helps me.

  13. Dentistry Research Paper Writing Services have come up with Dentistry Writing Services for dentistry coursework writing service students in order for them to score straight A’s in their dentistry paper writing services.

  14. Eminem is an American rapper and one of the most successful artists in hip-hop. As of 2020, Eminem net worth is now estimated to be $230 million.