AWS payment-cryptography documentation change

Service: payment-cryptography · 2026-06-07 · Documentation low

File: payment-cryptography/latest/userguide/terminology.md

Summary

Corrected KBPK term and added service code definition

Security assessment

Clarifies cryptographic terminology (key block protection vs encryption) and adds payment security concept without addressing vulnerabilities.

Diff

diff --git a/payment-cryptography/latest/userguide/terminology.md b/payment-cryptography/latest/userguide/terminology.md
index f24a692bb..8fa5dc28d 100644
--- a//payment-cryptography/latest/userguide/terminology.md
+++ b//payment-cryptography/latest/userguide/terminology.md
@@ -22 +22 @@ Common key typesOther terms
-AWS Payment Cryptography key
+**AWS Payment Cryptography key**
@@ -85 +85 @@ An issuer working key (IWK) is a key typically used to exchange data between an
-A key block encryption key(KBPK) is a type of symmetric key used to protect key blocks and thus wrap/encrypt other keys. A KBPK is similar to a KEK but a KEK directly protects the key material whereas in TR-31 and similar schemes, the KBPK only indirectly protects the working key. When using TR-31, _TR31_K1_KEY_BLOCK_PROTECTION_KEY_ is the correct key type, although TR31_K0_KEY_ENCRYPTION_KEY is supported interchangeably for historical purposes. 
+A key block protection key (KBPK) is a type of symmetric key used to protect key blocks and thus wrap/encrypt other keys. A KBPK is similar to a KEK but a KEK directly protects the key material whereas in TR-31 and similar schemes, the KBPK only indirectly protects the working key. When using TR-31, _TR31_K1_KEY_BLOCK_PROTECTION_KEY_ is the correct key type, although TR31_K0_KEY_ENCRYPTION_KEY is supported interchangeably for historical purposes. 
@@ -242,0 +243,5 @@ TR-34 also utilizes RSA internally, but is a separate format and is not interope
+**Service code**
+    
+
+A service code is a three-digit value encoded on the magnetic stripe and chip of a payment card that defines card attributes such as where the card can be used and whether additional authorization is required. The service code is used as an input when calculating verification values. Different service code values produce different types of verification values such as CVV (using the service code from the card's magnetic stripe), iCVV (service code 999 for chip cards), and CVV2 (service code 000). 
+