Select a function
Choose an HSM function from the sidebar to get started.
An open, educational simulator for payment HSM cryptography and payment network message flows.
Explore how terminals, acquirers, schemes and issuers communicate using AS2805 messages — for card issuance, PIN set, terminal provisioning and purchase transactions.
Explore →Step through individual HSM operations — generate LMKs and zone keys, encrypt PIN blocks, compute MACs, wrap keys with TR-31, and more. All inputs and outputs are visible.
Explore →Explore how money moves through a 4-party card scheme. Follow a transaction from clearing through settlement, and see how interchange fees, scheme fees, and merchant service fees are calculated at each step.
Explore →Paste raw hex bytes from an AS2805.2 message and decode it into human-readable fields, bitmaps, and a colour-coded hex dump.
Explore →The payment scheme simulator needs a screen width of at least 900px to display the network topology, activity records, and key material properly.
Try rotating to landscape, or use a tablet / desktop browser.
Financial Flows needs a screen width of at least 900px to display the settlement network, transaction flows, and account ledgers properly.
Try rotating to landscape, or use a tablet / desktop browser.
Paste the raw hex bytes of an AS2805.2 message (whitespace is ignored). Click Decode to parse it into human-readable fields.
Choose an HSM function from the sidebar to get started.
Category: Post-Quantum (experimental)
Run ML-KEM.Encaps against a peer’s encapsulation key, then HKDF-SHA-256 the 32-byte K down to an AES-128/AES-256 KBPK per NIST SP 800-227 (draft). Optionally TR-31 D-block wrap the derived key under an LMK so it slots straight into the existing KEK plumbing. Accepts the peer key as either raw FIPS 203 hex or as the SubjectPublicKeyInfo PEM (IETF draft) typically exchanged on the wire — supply one, not both.