All Tools
Tools/PIN Verification (IBM 3624)
💾
Cryptography & KeysAvailable
PIN Verification (IBM 3624)
Compute IBM 3624 natural PINs and PIN offsets — the DES/TDES-based PIN derivation method used in legacy issuer and HSM PIN management — with configurable validation data, pad character and decimalisation table.
Follows IBM 3624 PIN offset methodPIN length 4–12; validation data, pad character and decimalisation table as parameters·verified Oct 2026· double-checked Oct 2026— cross-checked against OpenSSL DES and TDES
Use test data only. All calculations run locally in your browser — PayProbe never sees, transmits, or stores your PAN, CVV, keys, PINs, or cryptographic inputs. How we handle data →
IBM 3624 Algorithm
- Validation data: by default the rightmost 12 digits of the PAN, excluding the check digit (or the value you enter, up to 16 hex digits)
- Pad on the right to 16 hex digits (8 bytes) with the pad character — 12 digits + "0000" by default (2 bytes); many HSMs use F
- Encrypt under the PIN derivation key: single DES for an 8-byte key, TDES (EDE) for a 16- or 24-byte key
- Decimalise each of the 16 result nibbles with the decimalisation table (default 0123456789012345: 0–9 kept, A–F → 0–5)
- Natural PIN = the leftmost n decimalised digits, where n is the PIN length (4–12)
- PIN Offset = (customer PIN digit − natural PIN digit) mod 10 for each position — the offset has as many digits as the PIN
Something wrong or missing? Report a problem— we check reports against the specs and fix them.