AWS payment-cryptography documentation change
Summary
Removed the synonym between CMK and UDK and deleted the UDK definition section
Security assessment
The change removes terminology clarification about UDK being synonymous with CMK. This appears to be a documentation cleanup without security implications since no vulnerabilities, weaknesses, or security incidents are mentioned.
Diff
diff --git a/payment-cryptography/latest/userguide/terminology.md b/payment-cryptography/latest/userguide/terminology.md index 1814602d1..27532b428 100644 --- a//payment-cryptography/latest/userguide/terminology.md +++ b//payment-cryptography/latest/userguide/terminology.md @@ -38 +38 @@ A base derivation key (BDK) is a working key used to derive subsequent keys and -A card master key (CMK) is one or more card specific key(s) typically derived from a Issuer Master Key, _PAN_ and _PSN_ and are typically _3DES_ keys. These keys are stored on the EMV Chip during personalization. Examples of CMKs include AC, SMI and SMC keys. These are also known as a unique derived key (UDK). AWS Payment Cryptography doesn't expose these derived keys directly but they are calculated in real-time for any commands tha are based on EMV standards such as ValidateAuthRequestCryptogram. +A card master key (CMK) is one or more card specific key(s) typically derived from a Issuer Master Key, _PAN_ and _PSN_ and are typically _3DES_ keys. These keys are stored on the EMV Chip during personalization. Examples of CMKs include AC, SMI and SMC keys. @@ -251,5 +250,0 @@ TR-34 is an implementation of ANSI X9.24-2 that described a protocol to securely -**UDK** - - -Unique Derived Key. Synonymous with CMK -