Keyshare Generator
Generate random TDES or AES test key components, or split an existing key into custodian components, with the KCV of every component and of the combined key — for key ceremonies and split-knowledge procedures.
Follows ANSI X9.24-12017·verified Oct 2026· double-checked Oct 2026— XOR split and recombination; odd-parity TDES components; TDES and AES (CMAC / ECB) KCVs
Use test data only. All calculations run locally in your browser — PayProbe never sees, transmits, or stores your PAN, CVV, keys, PINs, or cryptographic inputs. How we handle data →
Test keys only — generated in your browser with crypto.getRandomValues; never use a web page for live keys.
1F578797E3FD19CBA837A702C17C4662D5A892FB8B0534F280C2732F85C467BCEF494AD56E43FD9390A3117DDBB887B263657D930F2800C6D1The XOR has even parity in byte(s) 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16. Odd-parity adjusted (as an HSM stores it, same KCV): A2107CDAB986B362647C920E2901C7D0
Component 1 ⊕ Component 2
All 2 components are needed to rebuild the key (XOR, n-of-n — not an m-of-n threshold scheme); give each to a different custodian. TDES KCV: encrypt 8 zero bytes, leftmost 3 bytes. AES KCV: AES-CMAC of 16 zero bytes, leftmost 5 bytes (ANSI X9.24-1:2017, TR-31:2018); the legacy AES-ECB KCV is shown for HSMs that still print it.