emvlab.org
cryptogram calculator
emv
emv tags
tlv decoder
cap calculator
cryptogram calc

crypto
des calc
asn1 decoder

banking
pin translation
keyshare tools

misc
hex dump
char converter
mrz calculator

research
banking t&c
pin usage
relay attack
sca in psd2
revocable payments
sim swap scams
confirmation of payee
fraud on libra

bentham’s gaze

Update in July 2026: The site has been significantly updated to replace outdated packages. Functionality should be unchanged, but if you notice any regressions, please email contact@emvlab.org.

This application derives session keys from the card master key, following the algorithm described in EMV 4.1, Book 2, Part III, Annex A1.3. Optionally it can generate application cryptograms (ARQC, TC, AAC, AAR), when given the input the the Generate Application Cryptogram command, and the internal configuration of the card.

Session key derivation

(e.g. '0123456789ABCDEF0123456789ABCDEF')

(e.g. '00B4')

Transaction data (optional)

(e.g. '0000000098760000000000000000800000000000000000000012345678')

(e.g. '1000xxxxA50006040000')

“xxxx” is replaced by the ATC


https://emvlab.org/ – the one stop site for payment system researchers and practitioners – © 2009–2019

This site is run by Steven Murdoch and hosted by the Information Security Group at University College London. More details about the work we are doing can be found on our information security research blog: Bentham’s Gaze.

EMV® is a registered trademark of EMVCo LLC. This site and its operators are not affiliated or associated with or endorsed by EMVCo. All other trademarks and registered trademarks are the property of their respective owners.