Security - MAC & PIN Blocks Quiz

Test your understanding of message authentication codes, PIN block formats, and payment security fundamentals.


1. What is the fundamental difference between ANSI X9.9 and ANSI X9.19 MAC algorithms?
2. In ISO Format 0 PIN blocks, why is the PIN field XORed with the PAN field?
3. You receive DE53 = '0102010000000000'. What does this tell you about the PIN block in DE52?
4. Why is it critical to use constant-time comparison (subtle.ConstantTimeCompare) when verifying MACs?
5. What is the purpose of a Key Check Value (KCV)?
6. Where does the MAC typically appear in an ISO8583 message?
7. In the key hierarchy, what is the relationship between ZMK and ZPK?
8. For PIN '5678' and PAN '4111111111111111', what are the first 4 nibbles of the clear ISO-0 PIN block (before XOR)?
9. Your terminal is sending PINs that the issuer consistently rejects as 'wrong PIN', but customers insist they're entering correctly. Which is the MOST likely cause?
10. What is PIN translation and why does it occur?
11. A payment switch is experiencing intermittent MAC failures around 2:00 AM. Investigation shows one side performed key rollover at 2:00 AM, the other at 2:05 AM. What's the best solution?
12. What 12 digits from PAN '6011123456789123' are used in the ISO-0 PAN field?
13. Why does an HSM never export the LMK (Local Master Key)?
14. The MAC verification is failing. Logs show Side A calculated MAC over 1247 bytes, Side B calculated over 1239 bytes. What's the problem?
15. What is the main advantage of ISO Format 4 PIN blocks over ISO Format 0?
Join Discord