Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

New to HSM (Thales payshield 9000), I'm working on DUKPT algorithm. I manage to derive the IPEK(encrypted either under LMK or TMK), but I need to inject a plain text IPEK into an end point device. I don't think my end point device can support encrypted IPEK injection. Any expert here can share with me any idea, on how I getting the IPEK in plain text?

Basically my aim is to decrypt any "key" that is encrypted with LMK or TMK.

share|improve this question
Use decrypt(key) and LMK for TMK – user29358 Aug 10 '13 at 8:00
currently the HSM is in version 2.0c, do you mind to tell me which command code for that? – user29356 Aug 10 '13 at 8:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.