Search code examples
offlinesmartcardverificationplaintextemv

Is Plaintext offline PIN verification on EMV card by Micro USB OTG reader?

I have n88 micro USB OTG EMV card Reader. I used below application to read card data

https://play.google.com/store/apps/details?id=sasc.android.smartcard

When I see in the log, plaintext offline PIN verification is not listed as rule in CVM list.

smart card app results

My question is if I try to verify PIN after "read record" phase, will the card accept verify command ? Till now I am getting command invalid response for verify command. So is plaintext PIN verification possible if there is no rule in CVM list ?

Solution

  • Actually you sholdn't perform verification metod which is not supported in CVM. But if you want force perform plaintext Verify command ( plaintext offline PIN verification ) the result will be depend of specific payment card. For example for Visa card you can always perform plaintext, but MasterCard may not allow plaintext in own application control bytes.

    In your case, it seems card does not support Offline Pin at all.