CVV/CVC: the three digits that never survive an authorization

The same use case told visually, ready to present. Speaker notes carry the full explanation.

Payments

CVV and CVC

The three digits that never survive an authorization

CVV=Decimalize(hex → 0–93DES_CVK(issuer's CVK A + BPAN ‖ Exp ‖ SCcard data))[0:3]A MAC wearing a disguise: no database lookup, only the issuer can recompute it
CVV/CVC: the three digits that never survive an authorization · Classical Crypto Today1 / 4
1 / 4

Keys: ← → move, F full screen, G all slides, N notes