Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Newbie here, new to HSM (Thales payshield 9000), i'm working on DUKPT algorithm, i manage to derive the IPEK(encrypted either under LMK or TMK), but i need to inject a plain text IPEK in to a end point device, i don't think my end point device can support encrypted IPEK injection, any expert here can share with me any idea on how i getting the IPEK in plain text?

basically my aim is decrypt any "key" that encrypted with LMK or TMK.

Thanks in advance :)

share|improve this question
Use decrypt(key) and LMK for TMK –  user29358 Aug 10 '13 at 8:00
currently the HSM is in version 2.0c, do you mind to tell me which command code for that? –  user29356 Aug 10 '13 at 8:47
add comment

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.