AWS Security ChangesHomeSearch

AWS payment-cryptography documentation change

Service: payment-cryptography · 2026-01-31 · Documentation low

File: payment-cryptography/latest/userguide/terminology.md

Summary

Removed the synonym between CMK and UDK and deleted the UDK definition section

Security assessment

The change removes terminology clarification about UDK being synonymous with CMK. This appears to be a documentation cleanup without security implications since no vulnerabilities, weaknesses, or security incidents are mentioned.

Diff

diff --git a/payment-cryptography/latest/userguide/terminology.md b/payment-cryptography/latest/userguide/terminology.md
index 1814602d1..27532b428 100644
--- a//payment-cryptography/latest/userguide/terminology.md
+++ b//payment-cryptography/latest/userguide/terminology.md
@@ -38 +38 @@ A base derivation key (BDK) is a working key used to derive subsequent keys and
-A card master key (CMK) is one or more card specific key(s) typically derived from a Issuer Master Key, _PAN_ and _PSN_ and are typically _3DES_ keys. These keys are stored on the EMV Chip during personalization. Examples of CMKs include AC, SMI and SMC keys. These are also known as a unique derived key (UDK). AWS Payment Cryptography doesn't expose these derived keys directly but they are calculated in real-time for any commands tha are based on EMV standards such as ValidateAuthRequestCryptogram.
+A card master key (CMK) is one or more card specific key(s) typically derived from a Issuer Master Key, _PAN_ and _PSN_ and are typically _3DES_ keys. These keys are stored on the EMV Chip during personalization. Examples of CMKs include AC, SMI and SMC keys. 
@@ -251,5 +250,0 @@ TR-34 is an implementation of ANSI X9.24-2 that described a protocol to securely
-**UDK**
-    
-
-Unique Derived Key. Synonymous with CMK
-